CODEWITHSUNDEEP
springspring-securitysaml-2.0adfs
Akhil
Akhil

Reputation: 1264

Where to fetch user roles using ADFS service

I'm newbie to ADFS and I need to enable my web application developed with Spring Security to use ADFS service for user authentication and authorization, I've figured out the authentication process but it's the authorization piece is blocking me, actually, I'm confused, from where to get user roles? Because my datastore (mongoDB) neither have user info and roles which is required for securing my rest resources, can someone enlighten me how to implement same.

Upvotes: 1

Views: 315

Answers (1)

rbrayb
rbrayb

Reputation: 46720

In the ADFS wizard, you configure claims rules which place AD attributes in the token.

Some of these attributes can be roles which you can then use for authorisation.

That's assuming that there are some roles in the AD?

You can also use the claims rules to get attributes from your DB.

Upvotes: 1

Related Questions