I am trying to get a SAML token back from the Active Directory server with a Group claim in this format:
<Attribute Name="http://schemas.xmlsoap.org/claims/Group" NameFormat="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><AttributeValue>Domain Users</AttributeValue><AttributeValue>PBCO_Users</AttributeValue><AttributeValue>PBCO_IT</AttributeValue></Attribute>
I followed the steps in this post:
https://social.technet.microsoft.com/Forums/en-US/9862bb2c-89c5-4c64-8776-b4dc09a7fc88/problem-creating-a-group-claim?forum=winserverDS
and was only able to get the token back like so:
<Attribute Name="urn:oasis:names:tc:SAML:2.0:attrname-format:basic"><AttributeValue>Domain Users</AttributeValue><AttributeValue>PBCO_Users</AttributeValue><AttributeValue>PBCO_IT</AttributeValue></Attribute>
How can I achieve this?
Thanks!