Azure AD proxy - passing claims from Shib
Cantor, Scott
cantor.2 at osu.edu
Thu May 15 14:09:28 UTC 2025
Proxy flow c14n based on using an Attribute is generally done with the attribute-sourced c14n and you have lots of legacy use of XML that can be handled with simple properties now, and I provided examples of all that in the SAML authn flow docs.
Passing claims through has nothing to do with c14n, that's a matter of:
* having the right decoding rules
* a filter policy allowing them "in" from the issuer, so they get attached to the Subject
* a Subject DataConnector [1] in the resolver to produce resolved attributes from the authenticated Subject
* a filter policy allowing them back "out" to an SP.
For non-member support, that's as much as I'm prepared to help.
-- Scott
[1] https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199504610/SubjectDataConnector
More information about the users
mailing list