Quantcast
Channel: Claims based access platform (CBA), code-named Geneva forum
Viewing all articles
Browse latest Browse all 2535

ADFS - How to change SAML Issuer via custom claim rule

$
0
0

One of rely parties has a special requirement for the SAML Issuer received at their internal App. It has to be a string of the company name but not default format likehttp://sts.company.com/adfs/services/trust . Here is the sample SAML response they want to have.

<saml:Issuer> companyname</saml:Issuer>

               <samlp:Status>

                               <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />

                               <samlp:StatusMessage>IDp initiated SAML response.</samlp:StatusMessage>

               </samlp:Status>

               <saml:Assertion Version="2.0" ID="_7eb75dec802753640eb9a334eb848c94"

                               IssueInstant="2008-11-03T16:15:46.678-05:00">

                               <saml:Issuer> companyname</saml:Issuer>

I created a custom claim rule " => issue(Type = "http://schemas.microsoft.com/ws/2008/06/identity/claims/issuerid", Value = "company"); " and was able to post a SAML response like following. It was able to insert "<Issuer>company</Issuer>" in the assertion but didn't change <Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://sts.company.com/adfs/services/trust </Issuer>.

Did I miss anything ? Thank you for your help !

<Issuer xmlns="urn:oasis:names:tc:SAML:2.0:assertion">http://sts.company.com/adfs/services/trust </Issuer>
    <samlp:Status>
        <samlp:StatusCode Value="urn:oasis:names:tc:SAML:2.0:status:Success" />
    </samlp:Status>
    <Assertion ID="_58d84251-0bbc-40fa-b90f-d59fe6a0d56f"
               IssueInstant="2014-12-02T14:26:22.226Z"
               Version="2.0"
               xmlns="urn:oasis:names:tc:SAML:2.0:assertion"
               >
        <Issuer>company</Issuer>


This posting is provided AS-IS with no warranties/guarantees and confers no rights.


Viewing all articles
Browse latest Browse all 2535

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>