ADFS SSO

ADFS Configuration

The trust setup is a normal add from metadata URL with monitor and automatically update selected:

Issuance Transform Rules

Rule 1 – Send LDAP Attributes as Claims:

Rule 2 – Send Claims Using a Custom Rule. Changing the highlighted portion to the correct identifier:

Text of custom rule:


=> issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/spnamequalifier"] = "COMPANY.clinspark.com");

Documentation

ADFS SSO

Analytics

ADFS Configuration

Issuance Transform Rules

ClinSpark Configuration

Related content