How to add fixed e-mail suffix to Samaccount name in custom outgoing claim

Question

Hello, I am new to ADFS and have the following question:

At this moment is use the following outgoing claim:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
 => issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier"), query = ";userPrincipalName;{0}", param = c.Value);

Thsi works fine, however the claim is in the right format, we like to use other values for the outgoing claim.

This should be a combination of the "sAMAccountName" always followed by the suffix "@mydomain.com"

Can someone help me with creating this custom claim.

best regards,

Gerard

Answer 1

This problem is solved by Microsoft Premier Support with the following custon Claim Rule:

C:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname"]

=> Issue( Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier",
Value = regexreplace(c.Value, "^(.*)?[\\](?<samaccountname>(.*))$", "${samaccountname}" + "@mydomain.com"));

Best regrads,

Gerard