Share via

How to get all users of ADFS with all attributes (eg. name, email, phone etc.)

Casepoint Developer 66 Reputation points
2021-09-25T05:08:05.547+00:00

hi I created the custom claim for that so please check the below claim which is created by me:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname", "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/password"), query = "(&(objectClass=user)(objectCategory=person));mail,givenName,sn;{0}", param = c.Value);

using that claim I can log in successfully. you can check the below SS when clicking on the below link:
https://drive.google.com/file/d/1lV2zb6uV8PWzqk4qsgwVb6iFu-15O4bN/view?usp=sharing

but a problem like I get total email =500 but name=200 so I can not be mapping this, so I want this data with any particular one claim/rule

I already create below claim but this is not working:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
&& c1:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/surname"]
&& c2:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/name"]
=> issue(Type = "http://Mydomainname.com/members", Value = c1.Value + " " + c2.Value);

So I want something like the above in one type of link and get all the details of all users.

please click on the below link the check hows my code for that getting outgoing claims:
https://drive.google.com/file/d/1Mwo7-ai0v1503dIr_37SkFhXZJYF-a4F/view?usp=sharing

Please guide me on what I can do for that my main concern is I want all users of ADFS using the ADFS authentication, So I have already done Authentication but I can not get all user's details in a single claim/rule.

Thanks & regards
Bhavdip Talaviya

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,211 questions
0 comments

7 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2021-11-22T06:02:47.563+00:00

    You don't. ADDS doesn't use federation. Your token is good for your user to access your app.

    If the ADDS is synchronized to Azure AD, then you can have your app trust Azure AD instead and then have some OAuth2 on behalf user flow calls to query the list of objects from the Azure AD Graph API.

    At this point, this is no longer an ADFS issue I'm afraid. I would suggest you look at Azure AD and OAuth2 integration.

  2. Casepoint Developer 66 Reputation points
    2021-11-24T08:54:28.35+00:00

    Hi, @Pierre Audonnet - MSFT is it possible to get all user's details of the windows active directory using windows account login using ADFS?