Quantcast
Channel: Azure Active Directory forum
Viewing all articles
Browse latest Browse all 16000

How can I add an attribute to a SAML 2.0 response?

$
0
0

I am trying to implement SSO with a relying party while using Azure AD as the IdP and they require the email address to come from one of the following attributes below in the SAML response.  But I can't for the life of my find out where I can configure the response in the Azure management console and my search-fu has so far turned up nil.

  • name="email"
  • name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  • name="emailAddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
  • name="emailaddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
  • name="Email",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
  • name="saml_username",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"
  • name="emailAddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
  • name="emailaddress",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:unspecified"
  • name="emailaddress",nameFormat="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
  • name="urn:oid:0.9.2342.19200300.100.1.3",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:uri"
  • name="mail",nameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"

        <AttributeStatement>
            <Attribute Name="http://schemas.microsoft.com/identity/claims/tenantid">
                <AttributeValue>[MYGUID]</AttributeValue>
            </Attribute>

<!-- I want an email attribute here -->

            <Attribute Name="http://schemas.microsoft.com/identity/claims/objectidentifier">
                <AttributeValue>[MYOID]</AttributeValue>
            </Attribute>
            <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name">
                <AttributeValue>jeff.tindall@mycompany.com</AttributeValue>
            </Attribute>
            <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname">
                <AttributeValue>Tindall</AttributeValue>
            </Attribute>
            <Attribute Name="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname">
                <AttributeValue>Jeff</AttributeValue>
            </Attribute>
            <Attribute Name="http://schemas.microsoft.com/identity/claims/displayname">
                <AttributeValue>Jeff Tindall</AttributeValue>
            </Attribute>
            <Attribute Name="http://schemas.microsoft.com/identity/claims/identityprovider">
                <AttributeValue>https://sts.windows.net/[MYGUID]/</AttributeValue>
            </Attribute>
        </AttributeStatement>
        <AuthnStatement AuthnInstant="2015-02-20T19:51:12.000Z" SessionIndex="_1eb9dd08-0bb7-48b0-b37c-64eb64d9a5f2">
            <AuthnContext>
                <AuthnContextClassRef>urn:oasis:names:tc:SAML:2.0:ac:classes:Password</AuthnContextClassRef>
            </AuthnContext>
        </AuthnStatement>
    </Assertion>
</samlp:Response>

Thanks in advance.

Jeff



Viewing all articles
Browse latest Browse all 16000

Trending Articles