ADFS - Restrict to AD Group

active-directory adfs

This can be done by adding a so-called Issuance Authorization Rule.

Step-by-step:

  • Open AD FS Management Center
  • Expand Trust Relationsships
  • Select Relying Party Trusts
  • Right click the required trust
  • Click Edit Claim Rules
  • Goto the Issuance Authorization Rules tab
  • Delete the default Permit Access To All Users rule
  • Click Add Rule
  • Select Permit or Deny Users Based on an Incoming Claim
  • Incoming Claim Type, select Group SID
  • Click Browse at Incoming claim value
  • Select the required group
  • You're done

Related

How do I "test" name-based virtual hosting?
How can I install git on RHEL 6?
SQL Server 2005: There is insufficient system memory to run this query
Fail2Ban Correctly Attempts to Ban IP but IP does not get banned - iptables chain exists but not working
Integral: $\int_{-\infty}^{\infty} x^2 e^{-x^2}\mathrm dx$
High-level linear algebra book
Proving the Apollonian circle formula
Finding integers of the form $3x^2 + xy - 5y^2$ where $x$ and $y$ are integers, using diagram via arithmetic progression
proving tautologically equivalent
Integral of $\int e^{2x} \sin 3x\, dx$
$ac\equiv bc \pmod{\!m}\!\!\iff\!\! a\equiv b \pmod{\!\!\frac{m}{(c,m)}}$ [Euclid's Lemma, congruence form]
Prove that if d is a common divisor of a and b, then $d=\gcd(a,b)$ if and only if $\gcd(a/d,b/d)=1$ [duplicate]