Does Azure AD SAML support x.509.subject NameIdentifier ?

Rahul 236 Reputation points
2020-05-29T19:11:17.98+00:00

Hi,

I wanted to know if Azure AD supports x.509.subject NameIdentifier in SAML ?

SAML V2.0 Deployment Profiles for X.509 Subjects describes how a principal who has been issued an X.509 identity certificate is represented as a SAML Subject, how an assertion regarding such a principal is produced and consumed, and finally how two entities exchange attributes about such a principal.

Can someone validate if the above is supported then how to implement it ?

Reference Link: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/certificate-signing-options

Is the above link referring to same concept ? Any explanation ?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,468 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Jai Verma 461 Reputation points
    2020-06-02T08:21:31.927+00:00

    The article you posted is not related to what you are looking for. This is the right document - https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization

    As per the document above, AAD does not support x509 name id.

    0 comments