Print

Configure Attribute Claims

The next step is to configure AD FS to send user attributes to eCase in the correct format. To do this, follow the steps below:

  1. Right click the eCase Relying Party Trust in the AD FS management tool and select Edit Claim rules.
  2. Click Add rule.
  3. When prompted to choose a Claim rule template, select Send LDAP Attributes as claims and click Next.
  4. Configure the claim rule as follows:
    FieldDescription
    Claim rule nameEnter a name of your choice, for example, eCase claims
    Attribute storeSelect Active Directory
    Mapping of LDAP attributes to outgoing claim typesAdd four mappings:
    LDAP AttributeOutgoing Claim Type
    objectGUIDName ID
    E-Mail-Addresses E-Mail Address
    SurnameSurname
    Given-NameGiven Name

    NOTE the objectGUID option may not appear in the drop down list so must be entered manually.

    The result should look like this:

    Configure the attribute claims

    NOTE It is your responsibility to ensure that the Name ID is a unique, unchanging identifier for an individual user. eCase will create a duplicate account for a user if their Name ID changes.