I am trying to implement SSO with a relying party while using Azure AD as the IdP and they require the email address to come from one of the following attributes below in the SAML response. But I can't for the life of my find out where I can configure the response in the Azure management console and my search-fu has so far turned up nil.
- name="email"
- name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
- name="emailAddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
- name="emailaddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
- name="Email",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
- name="saml_username",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
- name="emailAddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
- name="emailaddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
- name="emailaddress",nameFormat="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
- name="urn:oid:0.9.2342.19200300.100.1.3",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
- name="mail",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
<AttributeStatement>
<Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
<AttributeValue>[MYGUID]</AttributeValue>
</Attribute>
<!-- I want an email attribute here -->
<Attribute Name="http://schemas.microsoft.com/identity/claims/objectidentifier">
<AttributeValue>[MYOID]</AttributeValue>
</Attribute>
<Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
<AttributeValue>jeff.tindall@mycompany.com</AttributeValue>
</Attribute>
<Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
<AttributeValue>Tindall</AttributeValue>
</Attribute>
<Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
<AttributeValue>Jeff</AttributeValue>
</Attribute>
<Attribute Name="http://schemas.microsoft.com/identity/claims/displayname">
<AttributeValue>Jeff Tindall</AttributeValue>
</Attribute>
<Attribute Name="http://schemas.microsoft.com/identity/claims/identityprovider">
<AttributeValue>https://sts.windows.net/[MYGUID]/</AttributeValue>
</Attribute>
</AttributeStatement>
<AuthnStatement AuthnInstant="2015-02-20T19:51:12.000Z" SessionIndex="_1eb9dd08-0bb7-48b0-b37c-64eb64d9a5f2">
<AuthnContext>
<AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>
</AuthnContext>
</AuthnStatement>
</Assertion>
</samlp:Response>
Thanks in advance.
Jeff