ADFS RP to Azure AD RP Migration

DT_Support 21 Reputation points
2020-04-09T13:27:36.313+00:00

Hello,

We are in the process of moving our Relay Parties trusts from on prem ADFS to Azure AD. I have a party trust setup with WebEx and it inlcudes some custom claim rules. Can someone help me in the proper formatting of these claims in Azure AD SSO?

  1. => issue(Type = "optionalparams", Value = "MW=Pro");
  2. => issue(Type = "optionalparams", Value = "FL=OFF");
  3. => issue(Type = "optionalparams", Value = "RC=OFF");
  4. => issue(Type = "optionalparams", Value = "RE=OFF");
  5. c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
    => issue(store = "Active Directory", types = ("updateTimeStamp"), query = ";whenChanged;{0}", param = c.Value);

I am not sure if any of these are supported in Azure AD SSO. If so assitance in the proper formatting and setup would be greatly appreciated.

Thank You

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,214 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,151 questions
{count} votes

4 answers

Sort by: Most helpful
  1. jLight 201 Reputation points
    2020-04-09T15:09:18.297+00:00
    0 comments No comments

  2. jLight 201 Reputation points
    2020-04-09T15:14:47.577+00:00

    But you would add them under custom attribute.

    7207-chrome-tcirqx8b6l.png

    0 comments No comments

  3. DT_Support 21 Reputation points
    2020-04-09T17:52:47.533+00:00

    Hi JLight,

    Thank you for the response. App compatibility shows everything is green and ready to move.

    I think the custom attributes is what I was looking for and if their would be any special formatting, but from your example, looks pretty straight forward.

    0 comments No comments

  4. DT_Support 21 Reputation points
    2020-04-17T18:15:12.137+00:00

    I have another question surrounding the "optionalparams" as the name.

    When adding that claim its only allowing a single "optionalparams" name. I cannot add another claim name "optionalparams"

    Based on the values, would use the MW as the name and the value as Pro7591-capture.png

    0 comments No comments