我为AD定义了几个"Acceptance transform rules"突然停止工作..看起来直到ADFS索赔转换管道的下一步(依赖方的发布转换规则),它才会看到它 .
Does anyone know exactly when the relyingpartytrustid-claim is issued by ADFS? 我找不到有关如何/何时发出这些索赔的任何信息 .
声明规则之前有效,然后突然停止工作:
c:[Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid"]
=> add(store = "CustomAttributeStore", types = ("http://domain.no/context/FmApplicationId", "http://domain.no/context/AdfsApplicationId", "http://domain.no/context/CustomProperty"), query = "GetApplicationAttributes#FmApplicationId,AdfsApplicationId,CustomProperty", param = c.Value);
如果规则被置于“接受转换规则”下,则以下规则会导致发布“临时”,而不是当它被置于“发布转换规则”下时
NOT EXISTS([Type == "http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid"])
=> issue(Type = "http://domain.no/temp", Value = "dontexist");
1 回答
声明http://schemas.microsoft.com/2012/01/requestcontext/claims/relyingpartytrustid是Web应用程序代理在外部用户身份验证期间向AD FS提供的请求上下文的一部分 .