Mapping email claim from custom claims provider to sharepoint user email in profile

Question

I have Sharepoint 2010 using as the only authentication method a custom claims provider. My custom claims provider has a email claim: http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress

I set this parameter on theshareponit console (stsadmin) when configuring the provider:

$map3 = New-SPClaimTypeMapping -IncomingClaimType "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" -IncomingClaimTypeDisplayName "EmailAddress" -SameAsIncoming

I want to see this claims mapped to the Sharepoint user profile. That means that when I access the user profile (clicking on "my settings" on the logged user for example) I would like to see the email parameter. (I would like to see the claim as a SPContext.Current.Web.CurrentUser.Email)

At this moment, those parameters are not mapped.

Any tip / help with that? I'm really trying lot of several things but I can't get it to work!..

Thanks!..

PnP

Answer 1

The code you're showing will only assign the mapping to a variable ($map3). You also need to add that mapping to the trusted issuer:

$sp = Get-SPTrustedIdentityProvider –Name "YourSTS"

Add-SPClaimTypeMapping -Identity $map3 -TrustedIdentityTokenIssuer $sp

Here is some more info and examples:

• http://sharepintblog.com/2011/10/26/adding-additional-claims-to-a-trusted-identity-token-issuer/
• http://technet.microsoft.com/en-us/library/ff607816.aspx

EDIT: To then map the claims, you need to go to Central Administration -> Application Management -> User Profile Service Application -> Manage User Properties -> Edit the Desired User Property.

Finally, edit the mapping as shown below:

Here is more info: http://technet.microsoft.com/en-us/library/cc262327.aspx