You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory-b2c/saml-technical-profile.md
+27-3Lines changed: 27 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -9,7 +9,7 @@ manager: celestedg
9
9
ms.service: active-directory
10
10
ms.workload: identity
11
11
ms.topic: reference
12
-
ms.date: 02/13/2020
12
+
ms.date: 02/30/2020
13
13
ms.author: mimart
14
14
ms.subservice: B2C
15
15
---
@@ -86,11 +86,35 @@ The **Name** attribute of the Protocol element needs to be set to `SAML2`.
86
86
87
87
The **OutputClaims** element contains a list of claims returned by the SAML identity provider under the `AttributeStatement` section. You may need to map the name of the claim defined in your policy to the name defined in the identity provider. You can also include claims that aren't returned by the identity provider as long as you set the `DefaultValue` attribute.
88
88
89
-
To read the SAML assertion **NamedId** in **Subject** as a normalized claim, set the claim **PartnerClaimType** to `assertionSubjectName`. Make sure the **NameId** is the first value in assertion XML. When you define more than one assertion, Azure AD B2C picks the subject value from the last assertion.
89
+
### Subject name output claim
90
+
91
+
To read the SAML assertion **NamedId** in the **Subject** as a normalized claim, set the claim **PartnerClaimType** to value of the `SPNameQualifier` property. If the `SPNameQualifier`property is not presented, set the claim **PartnerClaimType** to value of the `NameQualifier` property.
If both `SPNameQualifier` or `NameQualifier` are not presented in the SAML assertion, set the claim **PartnerClaimType** to `assertionSubjectName`. Make sure the **NameId** is the first value in assertion XML. When you define more than one assertion, Azure AD B2C picks the subject value from the last assertion.
113
+
90
114
91
115
The **OutputClaimsTransformations** element may contain a collection of **OutputClaimsTransformation** elements that are used to modify the output claims or generate new ones.
92
116
93
-
The following example shows the claims returned by the Facebook identity provider:
117
+
The following example shows the claims returned by a SAML identity provider:
94
118
95
119
- The **issuerUserId** claim is mapped to the **assertionSubjectName** claim.
96
120
- The **first_name** claim is mapped to the **givenName** claim.
0 commit comments