IefPolicies

3.0.6

snippets/SAML-IdP.xml

                                <ClaimsProvider>

    <Domain>Contoso.com</Domain>

    <DisplayName>Contoso</DisplayName>

    <TechnicalProfiles>

      <TechnicalProfile Id="Contoso-SAML2">

        <DisplayName>Contoso</DisplayName>

        <Description>Login with your SAML identity provider account</Description>

        <Protocol Name="SAML2"/>

        <Metadata>

          <Item Key="PartnerEntity">https://your-AD-FS-domain/federationmetadata/2007-06/federationmetadata.xml</Item>

        </Metadata>

        <CryptographicKeys>

          <Key Id="SamlMessageSigning" StorageReferenceId="B2C_1A_SAMLSigningCert"/>

        </CryptographicKeys>

        <OutputClaims>

          <OutputClaim ClaimTypeReferenceId="issuerUserId" PartnerClaimType="assertionSubjectName" />

          <OutputClaim ClaimTypeReferenceId="givenName" PartnerClaimType="first_name" />

          <OutputClaim ClaimTypeReferenceId="surname" PartnerClaimType="last_name" />

          <OutputClaim ClaimTypeReferenceId="displayName" PartnerClaimType="http://schemas.microsoft.com/identity/claims/displayname" />

          <OutputClaim ClaimTypeReferenceId="email"  />

          <OutputClaim ClaimTypeReferenceId="identityProvider" DefaultValue="contoso.com" />

          <OutputClaim ClaimTypeReferenceId="authenticationSource" DefaultValue="socialIdpAuthentication" />

        </OutputClaims>

        <OutputClaimsTransformations>

          <OutputClaimsTransformation ReferenceId="CreateRandomUPNUserName"/>

          <OutputClaimsTransformation ReferenceId="CreateUserPrincipalName"/>

          <OutputClaimsTransformation ReferenceId="CreateAlternativeSecurityId"/>

          <OutputClaimsTransformation ReferenceId="CreateSubjectClaimFromAlternativeSecurityId"/>

        </OutputClaimsTransformations>

        <UseTechnicalProfileForSessionManagement ReferenceId="SM-Saml-idp"/>

      </TechnicalProfile>

    </TechnicalProfiles>

  </ClaimsProvider>