Claim rule configuration for EMS360 SSO
First issuance transform rule (Translate AD email to SAML email)
In the ADFS management console, navigate to:
Trust Relationships > Relying Party Trusts > [Your Application] > Edit Claim RulesSelect Add Rule and choose Send LDAP Attributes as Claims template
Configure the rule with these settings:
Claim rule name: email-email
Attribute store: Active Directory
LDAP attribute: E-Mail-Addresses
Outgoing Claim Type: E-mail Address
Click Finish to save the rule.
Second transform rule (Convert Email to NameID-Email)
Select Add Rule again and choose Transform an Incoming Claim template
Configure the rule with these settings:
Claim rule name: email to nameid
Incoming claim type: E-Mail Address
Outgoing claim type: Name ID
Outgoing name ID format: Email
Select Pass through all claim values
Click Finish to save the rule.
