How to add relying party (Azure AD (AFDS)) to Shib IdP V3

Wed Jun 13 03:36:34 EDT 2018

Thanks for all your inputs.
It is now working.
It was simply the wrong path to go with the Shibboleth IdP +
relying-party.xml in my scenario.
So all configurations were done in the SP only.

shibboleth2.xml:

    <ApplicationDefaults
entityID="https://dkatec-ts1.corp.com/idp/shibboleth"
						 REMOTE_USER="persistent-id"

cipherSuites="ECDHE+AESGCM:ECDHE:!aNULL:!eNULL:!LOW:!EXPORT:!RC4:!SHA:!SSLv2">

            <SSO entityID="https://sts.windows.net/1d06......./">SAML2
SAML1</SSO>

		<MetadataProvider type="XML"
uri="https://login.microsoftonline.com/1...-.../federationmetadata/2007-06/federationmetadata.xml?appid=e0943c34-70bc-4045-a7b4-1f3649f4c644"
              backingFilePath="azure_metadata.xml" reloadInterval="7200">
        </MetadataProvider>

attribute-map.xml:

    <Attribute
name="urn:oasis:names:tc:SAML:1.1:nameid-format:WindowsDomainQualifiedName"
id="persistent-id">
        <AttributeDecoder xsi:type="NameIDAttributeDecoder"
formatter="$Name" defaultQualifiers="true"/>
    </Attribute>

    <Attribute
name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="sn"/>
    <Attribute
name="http://schemas.microsoft.com/identity/claims/displayname"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="displayname"/>	

	<Attribute
name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="givenname"/>		
	<Attribute
name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="email"/>		
	<Attribute
name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name"
nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
id="name"/>	

Result from /secure page:

HTTP_DISPLAYNAME	Jesper Laursen
HTTP_EMAIL	Jespers_mail at corp.com
HTTP_GIVENNAME	Jesper
HTTP_NAME	Jespers_mail at corp.com
HTTP_PERSISTENTID	dkJesLau
HTTP_SN	Laursen
HTTP_REMOTEUSER	dkJesLau		

Helper for virtual directory (classic ASP) IIS 7.0
Please this as default.asp in virtual dir named "secure"

<HTML> 
  <BODY> 
  This page was last refreshed on <%= Now() %>. 

<%
for each x in Request.ServerVariables
  if x <> "ALL_HTTP" and x <> "ALL_RAW" then
  response.write("
" & x & "	" & Request.ServerVariables(x) & "")
end if

next
%>

  </BODY> 
</HTML> 

--
Sent from: http://shibboleth.1660669.n2.nabble.com/Shibboleth-Users-f1660767.html