Server Fault is a question and answer site for system and network administrators. It's 100% free, no registration required.

Sign up
Here's how it works:
  1. Anybody can ask a question
  2. Anybody can answer
  3. The best answers are voted up and rise to the top

ADFS SSO setup with Salesforce which uses UPN as NameID, has following configuration ADFS.

Claim Rule Template: Send LDAP Attributes as Claims
Claim Rule Name: Send the UPN as NameID 
LDAP Attribute: User Principal Name
Outgoing Claim Type: Name ID

Everything works for all users. However when UPN of a user is changed, SAML response from ADFS doesn't contain NameID tag in Subject tag. What might be the reason of the strange behavior?

share|improve this question

Reading this blog (http://www.jonathanhardison.com/index.php/2012/07/05/adfs-2-0-claims-incomplete-or-wrong-on-username-change/), we restarted the server & issue got resolved.

Looks like ADFS caches the data, restarting ADFS cleared cache.

share|improve this answer
    
Would restart IIS do the trick? – blaughw Sep 16 '15 at 1:40

Your Answer

 
discard

By posting your answer, you agree to the privacy policy and terms of service.

Not the answer you're looking for? Browse other questions tagged or ask your own question.