我收到的声明输入this等身份。
我只想要友好的名字" AdLogon "作为我的索赔类型。 我知道我们可以通过操纵字符串来实现它,但是有没有标准的方法来实现这一点。?
答案 0 :(得分:0)
正常的索赔规则是例如:
c:[Type ==“http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname”,Issuer ==“AD AUTHORITY”] => issue(store =“Active Directory”,types =(“http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress”),query =“; mail; {0}”,param = c.Value);
你想要的东西:
c:[Type ==“http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname”,Issuer ==“AD AUTHORITY”] => issue(store =“Active Directory”,types =(“http://schemas.xmlsoap.org/ws/2005/05/identity/claims/AdLogon”),query =“; [some attribute]; {0}”,param = c.Value);
要获得“AdLogon”,请使用:
c:[Type ==“http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname”,Issuer ==“AD AUTHORITY”] => issue(store =“Active Directory”,types =(“AdLogon”),query =“; [some attribute]; {0}”,param = c.Value);