我有一个 Windows Azure 应用程序，它使用 Windows Identity Foundation (WIF) 和访问控制服务 (ACS) 作为其身份提供程序。
ACS 又配置为使用 ADFS 作为其身份提供者。
我在 ADFS 中创建了一个新的自定义声明，但无法将其传播到应用程序。如果不重新加载身份提供者的 FederationMetadata（这将删除所有现有规则，因此警告告诉我），有人知道我需要做什么吗？
我已向 ACS 添加了一条新规则来传递自定义声明。
我已将新声明添加到 web.config 中的部分，以便让 WIF 知道我对新声明感兴趣。
但到目前为止，还没有任何迹象表明我有新的主张。诊断这个问题似乎几乎是不可能的。
任何想法将不胜感激！
I have a Windows Azure application that is using Windows Identity Foundation (WIF) with the Access Control Service (ACS) as its Identity Provider.
ACS, in turn, is configured to use ADFS as its Identity Provider.
I've created a new custom claim in ADFS and am having trouble propogating it through to the app. Without reloading the FederationMetadata for the Identity Provider (which will drop all of the existing rules, so the warning tells me), does anyone know what I need to do?
I've added a new rule to ACS to pass through the custom claim.
I've added the new claim to the section in web.config to let WIF know that I'm interested in the new claim.
But so far, there's no sign of my new claim. Diagnosing the issue seems to be nigh-on impossible.
Any ideas would be gratefully received!
发布评论
评论（2）
日志记录可能是您最好的选择：
对于 ADFS：
How to Enable Debug Logging for Active目录联合服务 2.0 (AD FS 2.0)
AD FS 2.0 中的诊断
对于 WIF：
WIF 跟踪
Windows Identity Foundation 示例 - Trace 是您的朋友
另外，请尝试重新启动 ADFS：
ADFS：停止/启动 ADFS v2.0
两个 ADFS Azure 有 Powershell cmdlet 来提取信息：
尝试运行 RP 和声明，看看有什么信息。显示。
使用 Windows PowerShell 进行 AD FS 2.0
宣布：Windows Azure AppFabric 访问控制服务的 ACS Cmdlet 示例
Logging is probably your best bet:
For ADFS:
How to Enable Debug Logging for Active Directory Federation Services 2.0 (AD FS 2.0)
Diagnostics in AD FS 2.0
For WIF:
WIF Tracing
Windows Identity Foundation Samples–Trace is Your Friend
Also, try restarting ADFS:
ADFS : Stop / start ADFS v2.0
Both ADFS and Azure have Powershell cmdlets to extract info:
Try running the RP and claims ones and see what info. is displayed.
Using Windows PowerShell for AD FS 2.0
Announcing: Sample ACS Cmdlets for the Windows Azure AppFabric Access Control Service
这可能是 ADFS 中的配置错误。您确定 ADFS 正在发出新的自定义声明吗？同意 @nzpcmad 启用 ADFS 日志记录。
这通常是不需要的：
我已将新声明添加到 web.config 中的部分，以便让 WIF 知道我对新声明感兴趣。
This is likely to be a misconfiguration in ADFS. Are you sure ADFS is issuing the new custom claim? Agree w/ @nzpcmad in enabling ADFS logging.
This is usually not needed:
I've added the new claim to the section in web.config to let WIF know that I'm interested in the new claim.