27.8.2 Making the Corresponding Changes in ADFS

  1. Open the ADFS management console.

  2. Expand Trust Relationships.

  3. Click Add Claims Provider trust.

  4. Paste OSP metadata URL https://<AAF_server_hostname>/osp/a/TOP/auth/saml2/metadata.

    It may not work for self-signed certificate. You can copy metadata from OSP URL to an XML file and provide the file name.

  5. Specify the Display name.

  6. Select Open the Edit Claim Rules dialog for this claims provider when the wizard closes.

  7. In Edit Claims Rules, click Add Rule.

  8. Select Send Claims Using a Custom Rule.

  9. Click Next.

  10. Specify Claim rule name.

  11. Paste Custom rule and click Finish.

    c:[Type == "upn"]=> issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType);