ADFS to Shibboleth

[Nancy Kerr]

We are trying to transfer the info that is in the EmployeeID attribute in AD to a Shibboleth.  We have the following claim rules set-up.


c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("EmployeeID"), query = ";employeeID;{0}", param = c.Value);


c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
=> issue(Type = "urn:oid:1.3.6.1.4.1.5923.1.1.1.6", Value = c.Value, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropert ies/attributename"] = "urn:oasis:names:tc:SAML:2.0:attrnameformat:uri");

The only info that that is being sent is the e-mail address.

Nancy

-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180627/f4d05d66/attachment.html>