Quantcast
Channel: Claims based access platform (CBA), code-named Geneva forum
Viewing all articles
Browse latest Browse all 2535

Spring saml Extension with ADFS

$
0
0

I am working on integrating Spring saml Extension within ADFS for SSO. I am using ADFS2.0 as the IDP and I have generated meta data for Spring application and imported meta data into ADFS. I will pass email address and display name to spring application.

Here is the claim rule I set in the ADFS.

1. get attributes

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
 => issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"), query = ";displayName,mail;{0}", param = c.Value);

2.Send email address as name ID

c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"]
 => issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress");

 can login in the Spring application. In General information, the information is correct. but in Principal's Attributes part. The value of attribute become org.opensaml.xml.schema.impl.XSAnyImpl@5abb6d06 and org.opensaml.xml.schema.impl.XSAnyImpl@46f2d373.

Does anyone why this happen? and how can I fix it?

Thank you very much.


Viewing all articles
Browse latest Browse all 2535

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>