ADFS to Shibboleth

[Nate Klingenstein]

Nancy,

It might be a copy/paste issue, but you have a space in the property you
defined for UPN:

Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropert
ies/attributename"

I don't know enough about claim configuration to be much more useful than
that, but it seems like a good thing to check.

Thanks,
Nate.


On Wed, Jun 27, 2018 at 11:23 AM, Nancy Kerr <Nancy.Kerr at msvu.ca> wrote:

> We are trying to transfer the info that is in the EmployeeID attribute in
> AD to a Shibboleth.  We have the following claim rules set-up.
>
>
>
>
>
> c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/
> windowsaccountname", Issuer == "AD AUTHORITY"]
>
> => issue(store = "Active Directory", types = ("EmployeeID"), query =
> ";employeeID;{0}", param = c.Value);
>
>
>
>
>
> c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
>
> => issue(Type = "urn:oid:1.3.6.1.4.1.5923.1.1.1.6", Value = c.Value,
> Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimpropert
> ies/attributename"] = "urn:oasis:names:tc:SAML:2.0:attrnameformat:uri");
>
>
>
> The only info that that is being sent is the e-mail address.
>
>
>
> Nancy
>
>
>
> --
> For Consortium Member technical support, see https://wiki.shibboleth.net/
> confluence/x/coFAAg
> To unsubscribe from this list send an email to
> users-unsubscribe at shibboleth.net
>
-------------- next part --------------
An HTML attachment was scrubbed...
URL: <http://shibboleth.net/pipermail/users/attachments/20180627/d5dab2c3/attachment.html>