Azure AD proxy - passing claims from Shib

Cantor, Scott cantor.2 at osu.edu
Thu May 15 14:09:28 UTC 2025


Proxy flow c14n based on using an Attribute is generally done with the attribute-sourced c14n and you have lots of legacy use of XML that can be handled with simple properties now, and I provided examples of all that in the SAML authn flow docs.

Passing claims through has nothing to do with c14n, that's a matter of:

* having the right decoding rules
* a filter policy allowing them "in" from the issuer, so they get attached to the Subject
* a Subject DataConnector [1] in the resolver to produce resolved attributes from the authenticated Subject
* a filter policy allowing them back "out" to an SP.

For non-member support, that's as much as I'm prepared to help.

-- Scott

[1] https://shibboleth.atlassian.net/wiki/spaces/IDP5/pages/3199504610/SubjectDataConnector




More information about the users mailing list