Create a Rule to Permit All Users
Applies To: Active Directory Federation Services (AD FS) 2.0
Using the Permit All Users rule template in Active Directory Federation Services (AD FS) 2.0, you can create an authorization rule that will give all users access to the relying party. You can use additional authorization rules to further restrict access. Users who are permitted to access the relying party from the Federation Service may still be denied service by the relying party.
You can use the following procedure to create a claim rule with the AD FS 2.0 Management snap-in.
Membership in Administrators, or equivalent, on the local computer is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).
To create a rule to permit all users
Click Start, point to Programs, point to Administrative Tools, and then click AD FS 2.0 Management.
In the console tree, under AD FS 2.0\Trust Relationships\Relying Party Trusts, click a specific trust in the list where you want to create this rule.
Right-click the selected trust, and then click Edit Claim Rules.
In the Edit Claim Rules dialog box, click the Issuance Authorization Rules tab or the Delegation Authorization Rules tab (based on the type of authorization rule you require), and then click Add Rule to start the Add Authorization Claim Rule Wizard.
On the Select Rule Template page, under Claim rule template, select Permit All Users from the list, and then click Next.
On the Configure Rule page, click Finish.
In the Edit Claim Rules dialog box, click OK to save the rule.
Additional references
Checklist: Creating Claim Rules for a Relying Party Trust