Multiple value claim : rule to select ony one value ?

DS 106 Reputation points
2022-06-21T09:41:53.997+00:00

is it possible to write issuance transfom rule(s) such as
when an input claim has multiple values
issue a single claim with a single value : only one of the values of the original claim ?

example
input claim named othermails has two values : mail1@ssss .com and mail2@ssss .com
i wish to output a new claim named single mail with value mail1@ssss .com
(in my case i do not bother if I output mail1@ssss .com or mail2@ssss .com but I must emit only a single value...)

aggregate function COUNT can detect if there are multiple values, but I don't know how to extract only one...

Thank you in advance

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
958 questions
{count} votes

1 answer

Sort by: Most helpful
  1. Pierre Audonnet - MSFT 9,976 Reputation points Microsoft Employee
    2022-06-29T20:13:29.107+00:00

    If a claim has multiple values, you cannot arbitratly send the first one or the second. I am not sure you can even guarantee the order (I guess that depends how you extracted them in the first place). However, you can filter the values down to only the one that you want to see (if that's in any way predicatable). For example if one is finishing with example.com and the other in example2.com, you can filter out one or the other. What is the rul in your case to send or not send a value?

    No comments