Forum Discussion
Solved
SP 2016 ADFS 4.0 Federated Partner Authenticates, but doesn't Authorize
Resource Domain/Forest (resource.local) SP 2016 Farm in Resource Domain webapp.resource.local ADFS 4.0 configured on internal network of resource.local WAP configured in DMZ publishing adfs.resour...
- What claims are you passing over the fed trust and what is the identity claim configured in SharePoint/sent by the RP from the resource domain ADFS?
What claims are you passing over the fed trust and what is the identity claim configured in SharePoint/sent by the RP from the resource domain ADFS?
User ADFS Issuance
UPN - passthrough
Primary Sid - passthrough
Primary group SID - passthrough
Name - passthrough
UPN --> emailAddress
Resource ADFS
UPN - passthrough
Primary Sid - passthrough
Primary group SID - passthrough
Name - passthrough
Email - passthrough
UPN --> emailAddress
SharePoint Identifier Claim = email