© 2024 IQVIA - All Rights Reserved

ADFS SSO

Owned by Toma Holtzer
03-Jan-2023
2 min read

ADFS Configuration

The trust setup is a normal add from metadata URL with monitor and automatically update selected:

Issuance Transform Rules

Rule 1 – Send LDAP Attributes as Claims:

Rule 2 – Send Claims Using a Custom Rule. Changing the highlighted portion to the correct identifier:

Text of custom rule:

=> issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] = "urn:oasis:names:tc:SAML:2.0:nameid-format:transient", Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/spnamequalifier"] = "COMPANY.clinspark.com");

ClinSpark Configuration

 

 

 

Exported and Printed Copies Are Uncontrolled