One of rely parties has a special requirement for the SAML Issuer received at their internal App. It has to be a string of the company name but not default format likehttp://sts.company.com/adfs/services/trust . Here is the sample SAML response they want to have.
<saml:Issuer> companyname</saml:Issuer>
<samlp:Status>
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
<samlp:StatusMessage>IDp initiated SAML response.</samlp:StatusMessage>
</samlp:Status>
<saml:Assertion Version="2.0" ID="_7eb75dec802753640eb9a334eb848c94"
IssueInstant="2008-11-03T16:15:46.678-05:00">
<saml:Issuer> companyname</saml:Issuer>
I created a custom claim rule " => issue(Type = "http://schemas.microsoft.com/ws/2008/06/identity/claims/issuerid", Value = "company"); " and was able to post a SAML response like following. It was able to insert "<Issuer>company</Issuer>" in the assertion but didn't change <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://sts.company.com/adfs/services/trust </Issuer>.
Did I miss anything ? Thank you for your help !
<Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://sts.company.com/adfs/services/trust </Issuer>
<samlp:Status>
<samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
</samlp:Status>
<Assertion ID="_58d84251-0bbc-40fa-b90f-d59fe6a0d56f"
IssueInstant="2014-12-02T14:26:22.226Z"
Version="2.0"
xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
>
<Issuer>company</Issuer>
This posting is provided AS-IS with no warranties/guarantees and confers no rights.