ADFS - Append String to End of Attribute Passed

Question

Good morning,

I'm dealing with a challenge with the value passed by ADFS to an application in a particular attribute.
Here is what he have for the value passed in the Claim Rule:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("User.username"), query = ";userPrincipalName;{0}", param = c.Value);

I need the value of the "User.username" attribute passed to the application during sign-on to have ".stage" appended to the end. How do I accomplish this?

I thought changing "c.Value" to "c.Value + '.stage'" might work in param, but I think that didn't work.

Answer 1

i think this rule will do

c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn"]
=> issue(Type = "User.username", Value = c.Value + ".stage");

as when AD is your claim provider, it already generates a claim "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" with the UserPrincipalName, and this rule simply set the right type and append the string .stage