SAML 2.0, ADFS doesn't pass claims properly

lau_erickson · August 4, 2020, 2:01pm

Has anyone configured Nexus3. with SAML 2.0, and ADFS?

I am able to send only the Name ID, however the First Name, Last Name, Email, and Groups are not sending even though they are linked through our ADFS and are enabled (nexus 3 account screen shot). Any user in Nexus 3 will have anonymous user access, however I want to make use of the groups and grant more granular access. I have attached some screen shots for troubleshooting.

I wonder if there is more of an in-depth guide with ADFS and Nexus 3, or if there are more resources that could be helpful. There seems to be very limited information on ADFS integration regarding Nexus 3.

nexus_3_account_screen_shot

lau_erickson · August 4, 2020, 2:04pm

attribute_rule

lau_erickson · August 4, 2020, 2:04pm

nexus3_idp_mapping

klau · August 4, 2020, 11:51pm

Hi @lau_erickson, thank you for your question. If you are a Nexus Pro customer, do you mind contacting our support team to open a support ticket? The specifics of ADFS in your environment might impact how user attributes are ingested. If the user object from ADFS has all the attributes populated, we expect the attribute values to be inserted into the SAML user when it is created in Nexus.