I currently have an ADFS 2.0 environment which we use to provide SSO to a bunch of external SaaS applications (Cisco WebEx, Workday, Service Now and Cisco Jabber to name a few)
The business I work for has been acquired and the default email addresses of all users are being changed. This will be causing issues to most (if not all) Relying Party as they all use the E-mail-Addresses claim as UserName or ID.
I did a test with one of the dev SaaS apps we use and modified an existing claim on the RPT from "Pass through all claim values" to "Replace incoming e-mail suffix claims with a new e-mail suffix" and it worked as expected using a test account.
Is there a better way to handle this? I'd rather transform the E-mail Address attribute only once than doing it for every RPT (if it can be done!)
Thanks for all your help! Francis