ADFS 2 as Shib Proxy

[Young, Darren]

>On 8/31/17, 3:22 PM, "users on behalf of Young, Darren"
><users-bounces at shibboleth.net on behalf of Darren.Young at chicagobooth.edu>
>wrote:
>
>> Wondering if there¹s anyone on here that¹s really familiar with ADFS
>> claims rules (I¹m not) and how to use them to capture a Shib IDP
>>response
>> and translate portions (or all?) of that into outgoing ADFS claims to an
>> SP (RP in ADFS jargon). It¹s a paying gig if you know how to do it.
>
>Be aware ADFS is a dead product walking, it's just going to rot in favor
>of Azure AD, but in the event that you're the one running both of these
>(and I echo Peter's point, I don't see why you'd do this), I would
>probably just encode the data you want for ADFS using its jargon since
>our configuration is a hell of a lot simpler and more well documented.
>
>If you aren't the one running the ADFS piece, then that mileage might
>vary of course.

Yep, aware of it, and we’re still on ADFS 2 on top of it (but slowly
moving to 3 and O365).

It’s our ADFS (and backside AD) which is separate from the campus
AD/ADFS/Shib, there’s no current method on campus to get our email
addresses asserted from the campus Shib instance hence the ADFS duct tape
in between.
>