ADFS 4 - set REMOTE_USER from value of claim or claim store lookup

Daniel Fung 1 Reputation point
2020-08-22T22:00:53.167+00:00

I have a web application that does auto-logon using REMOTE_USER http value that maps to a LDAP user of the same name. my issue is that the partner IDP is ADFS and i would like to use ADFS on my side of the trust in front of the web application (SP)

I need to set the value REMOTE_USER property either in the http headers of the session. the value of the REMOTE_USER should come ideally from the claim or claim lookup value. is this even possible in a claims processing pipeline. any customization or path forward please advise on ideas or solutions.

i see there is a shibboleth/apache/tomcat way of mapping into a http or environment variable, but i dont want to go learn shibboleth from ground up while i know my way around ADFS a lot more.

Thanks

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,259 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Vahid Ghafarpour 21,240 Reputation points
    2023-11-25T04:04:23.05+00:00

    You can manipulate incoming claims by using ADFS claims rules and issue custom claims to your applications. The key is to understand the incoming claims provided by ADFS and then use custom rules to issue the desired claims, such as REMOTE_USER, for your web application.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.