I am in the process of setting up a single sign on (SSO) system using ADFS and SAML 2.0. I have to following scenario that I am stuck on:

1) User attempts to access web resource, is not logged in so is directed to ADFS SSO service.

2) User successfully authenticates against ADFS.

3) ADFS passes SAML Response back to web resource.

4) The web resource itself has a user database but the user does not exist here.

5) So, the web resource must create the user account silently. To do this I need the email address.

So, is it possible to configure ADFS to return the email address of the user in a successful SAML response message?

没有正确的解决方案

许可以下: CC-BY-SA归因
不隶属于 StackOverflow
scroll top