Pregunta

I am in the process of setting up a single sign on (SSO) system using ADFS and SAML 2.0. I have to following scenario that I am stuck on:

1) User attempts to access web resource, is not logged in so is directed to ADFS SSO service.

2) User successfully authenticates against ADFS.

3) ADFS passes SAML Response back to web resource.

4) The web resource itself has a user database but the user does not exist here.

5) So, the web resource must create the user account silently. To do this I need the email address.

So, is it possible to configure ADFS to return the email address of the user in a successful SAML response message?

No hay solución correcta

Licenciado bajo: CC-BY-SA con atribución
No afiliado a StackOverflow
scroll top