ADFS Custom Claim to return group DNs

0
votes

I have had no luck in writing a custom claim rule to return the distinguishedName of the user's groups instead of just the name of the group. Are there any ADFS Custom Claim Rule ninja's out there who could help me out with this challenge?

For example, the default return is MYGroupName, but I need to return CN=MyGroupName,OU=Groups,DC=Domain,DC=local

1
adfs3.0

1 Answers

0
votes

@Pierre answered this over on the ADFS forum.

For reference:

c1:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"] && c2:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/groupsid"] => issue(store = "Active Directory", types = ("http://group/DN"), query = "(&(objectClass=group)(objectSID={1}));distinguishedName;{0}", param = c1.Value, param = c2.Value);