Take the 2-minute tour ×
Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS.

Claim Rule Template: Send LDAP Attributes as Claims
Claim Rule Name: Send the UPN as NameID 
LDAP Attribute: User Principal Name
Outgoing Claim Type: Name ID

Everything works for all users. However when UPN of a user is changed, SAML response from ADFS doesn't contain NameID tag in Subject tag. What might be the reason of the strange behavior?

share|improve this question

1 Answer 1

Reading this blog (http://www.jonathanhardison.com/index.php/2012/07/05/adfs-2-0-claims-incomplete-or-wrong-on-username-change/), we restarted the server & issue got resolved.

Looks like ADFS caches the data, restarting ADFS cleared cache.

share|improve this answer

Your Answer


By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.