Quantcast
Channel: All Centrify Express posts
Viewing all articles
Browse latest Browse all 1833

Re: Claims in SAML Assertion

$
0
0

Hi 

 

This is great news! You can leverage both SAML and WS-Fed, based on requirements, at the same time. This means you can have apps of all types to deploy to your Users.

 

Regarding your script, it seems you will need to explain where the attribute is sourced.

 

In the script, you can set the value based on the Logged in User's attribute from AD. Below will grab the 'mail' attribute from AD for the user, and use as the claim.

 

To set the claim in the script, you will want something like;

 

     setClaim(LoginUser.mail);

 

Note, this is based on your example indicating the email address is the likely needed attribute, however you can modify the 'mail' portion as needed.

 

To confirm it is working as expected, use the Test button just above the script and then input a Username. This will show you the assertion and you can see if the field is working as expected. Hint, check the bottom of the assertion and you will see the claim specified.

 

I hope this helps!

 

Have a great day!

 

Ryan V

 


Viewing all articles
Browse latest Browse all 1833

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>