I'm using Certificate Based Authentication in ADFS 3.0 and need to get the Subject field from the client certificate issued as a claim, but it's not available as an incoming claim to ADFS.
When I enable auditing I can see that it's present in the caller identity as the following claim type: http://schemas.microsoft.com/2012/12/certificatecontext/field/subject
But it doesn't get issued in the Issued identity, and thus is not available as an incoming claim to use in the Claims Rules.
Has anyone done this before? Can you tweak the incoming claims from client certificates?