---
sourceDocument: Australia Platform security
sourceDocumentLink: https://servicenow-prod.fluidtopics.net/r/de-DE/platform-security

 Release :

    - australia

ft:locale :

    - de-DE

ft:publication_title :

    - Australia Platform security

ft:clusterId :

    - psec

bundleId :

    - psec

workflow :

    - Platform


---

# Configure the ADFS relying party claim rules

# Configure the ADFS relying party claim rules {#ariaid-title1}

* Freigeben Version: Australia
* 
* Aktualisiert 12. März 2026
* 
* ![](https://www.servicenow.com/docs/portal-asset/ico-clock) 1 Minute Lesedauer

Edit the claim rules to enable proper communication with the instance.

## Vorbereitungen

Role required: sso_config_admin, business_rule_admin, script_include_admin

## Prozedur

1. Log into the ADFS server and open the management console.
2. Right-click the relying party trust and select Edit Claim Rules.
3. Click the Issuance Transform Rules tab.
4. Select Add Rules.
5. Select Send LDAP Attribute as Claims as the claim rule template to use.
6. Give the claim a name such as <kbd class="ph userinput">Get LDAP Attributes</kbd>.
7. Set the Attribute store to <kbd class="ph userinput">Active Directory</kbd>, the LDAP Attribute to <kbd class="ph userinput">E-Mail-Addresses</kbd>, and the Outgoing Claim Type to <kbd class="ph userinput">E-mail Address</kbd>.  

       c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]  
       => issue(store = "Active Directory", 
       types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"), 
       query = ";mail;{0}", param = c.Value);

8. Select Finish.
9. Select Add Rules.
10. Select Transform an Incoming Claim as the claim rule template to use.
11. Give the Claim a name such as <kbd class="ph userinput">Email to Name ID</kbd>.
12. Set the Incoming claim type to the Outgoing Claim Type in the previous rule.  
    For example, <kbd class="ph userinput">E-Mail Address</kbd>.
13. Set the Outgoing claim type to <kbd class="ph userinput">Name ID</kbd> and the Outgoing name ID format to <kbd class="ph userinput">Email</kbd>.  
    Hinweis:  
    These values must match the [Name ID policy](https://servicenow-prod.fluidtopics.net/I8gk77aEIfe_0L3B3P9d5A "Set up a NameID policy for SAML. SAML 2.0 requires the IdP to exchange a NameID token with the service provider.") you define during SAML 2.0 configuration.
14. Select Pass through all claim values.  

    This claim rule should look similar to the following rule language.

        c:[Type == "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"]
         => issue(Type = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier", 
        Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType, 
        Properties["http://schemas.xmlsoap.org/ws/2005/05/identity/claimproperties/format"] 
        = "urn:oasis:names:tc:SAML:1.1:nameid-format:emailAddress");

15. Click Finish.