Share via

ADFS-SuccessFactors

杨 泽森 1 Reputation point
2023-01-06T08:28:59.59+00:00

adfs - sso - SuccessFactors
异常详细信息:
Microsoft.IdentityServer.Service.Policy.PolicyServer.Engine.DuplicateNameIdentifierPolicyException: MSIS3046: 处理范围“https://www.successfactors.com/*”的策略之后生成了多个基于 SamlNameIdentifierClaimResource 的声明。

Microsoft Security | Active Directory Federation Services
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pierre Audonnet - MSFT 10,191 Reputation points Microsoft Employee
    2023-01-13T21:41:34.69+00:00

    The error suggests that there is an issue with the NameIdentifierPolicy.

    To help you, we need to know:

    1. What is expected by the application (here Succesfactor)?
    2. What is configured as Claims Issuance Rules on the relaying party trust?

    For 1, you can share a SAML trace (with browser plugin or with a tool such as Fiddler). For 2, you can share the output of a Get-ADFSRelyingPartyTrust command ran on the AD FS primary server.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.