CODEWITHSUNDEEP
active-directoryldapclaimsadfs3.0
Dotnet Learner
Dotnet Learner

Reputation: 41

Sending group name as claims in ADFS 3.0

I need to add a claim rule for a RP in ADFS 3.0 to issue all the group names to which the user is added as claims if the group names are, say A, B, C. How can I achieve this? As of now, I'm using LDAP attribute Token-Groups - Unqualified Names which will provide all group names which he is part of.

Upvotes: 1

Views: 2983

Answers (1)

rbrayb
rbrayb

Reputation: 46720

Filter the groups with regex.

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] => add(store = "Active Directory", types = ("http://claims/MyGroups"), query = ";tokenGroups;{0}", param = c.Value);

then something like:

c:[Type == "http://claims/MyGroups", Value =~ "^(?i)A"] => issue(claim = c);

and so on.

Upvotes: 1

Related Questions