{"id":4065,"date":"2018-06-10T10:46:58","date_gmt":"2018-06-10T06:46:58","guid":{"rendered":"https:\/\/rakhesh.com\/?p=4065"},"modified":"2018-07-16T11:35:36","modified_gmt":"2018-07-16T07:35:36","slug":"aside-various-adfs-links","status":"publish","type":"post","link":"https:\/\/rakhesh.com\/aside\/aside-various-adfs-links\/","title":{"rendered":"[Aside] Various ADFS links"},"content":{"rendered":"<p>No biggie, just as a reference to myself:<\/p>\n<ul>\n<li><a href=\"https:\/\/blogs.technet.microsoft.com\/askds\/2011\/10\/07\/ad-fs-2-0-claims-rule-language-primer\/\">ADFS 2.0 Claims Language Primer<\/a><\/li>\n<li><a href=\"https:\/\/social.technet.microsoft.com\/wiki\/contents\/articles\/4792.understanding-claim-rule-language-in-ad-fs-2-0-higher.aspx\">Understanding claim rule language in ADFS 2.0 and higher<\/a><\/li>\n<li><a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-fs\/technical-reference\/the-role-of-the-claim-rule-language\">The role of the claim rule language<\/a><\/li>\n<\/ul>\n<p><strong>Update<\/strong> 16 July 2018: Needed to make a claim rule yesterday that converted the email address from an incoming claim to Name ID of an outgoing claim. The default GUI provided rule didn&#8217;t work, so I made a custom one:<\/p>\n<pre class=\"lang:ps decode:true \">c:[Type == \"http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/emailaddress\"]\r\n =&gt; issue(Type = \"http:\/\/schemas.xmlsoap.org\/ws\/2005\/05\/identity\/claims\/nameidentifier\", Value = c.Value);<\/pre>\n<p>I think I&#8217;ll add more such snippets here later. <\/p>\n<p>Btw note to self: custom claim rules are useful if you want to combine multiple incoming claims &#8211; i.e. for an AND operation. If you don&#8217;t want to combine &#8211; i.e. you want to OR multiple claims &#8211; just add them as separate rules.<\/p>\n","protected":false},"excerpt":{"rendered":"<p>No biggie, just as a reference to myself: ADFS 2.0 Claims Language Primer Understanding claim rule language in ADFS 2.0 and higher The role of the claim rule language Update 16 July 2018: Needed to make a claim rule yesterday that converted the email address from an incoming claim to Name ID of an outgoing &hellip; <a href=\"https:\/\/rakhesh.com\/aside\/aside-various-adfs-links\/\" class=\"more-link\">Continue reading <span class=\"screen-reader-text\">[Aside] Various ADFS links<\/span><\/a><\/p>\n","protected":false},"author":1,"featured_media":0,"comment_status":"closed","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_jetpack_memberships_contains_paid_content":false,"footnotes":"","jetpack_publicize_message":"","jetpack_publicize_feature_enabled":true,"jetpack_social_post_already_shared":true,"jetpack_social_options":{"image_generator_settings":{"template":"highway","enabled":false}}},"categories":[258],"tags":[746],"jetpack_publicize_connections":[],"jetpack_sharing_enabled":true,"jetpack_featured_media_url":"","_links":{"self":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/4065"}],"collection":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/comments?post=4065"}],"version-history":[{"count":0,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/posts\/4065\/revisions"}],"wp:attachment":[{"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/media?parent=4065"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/categories?post=4065"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/rakhesh.com\/wp-json\/wp\/v2\/tags?post=4065"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}