Export (0) Print
Expand All
This topic has not yet been rated - Rate this topic

Permitting or Denying Users Based on an Incoming Claim

Updated: May 5, 2010

Applies To: Active Directory Federation Services (AD FS) 2.0

Using the Permit or Deny Users Based on an Incoming Claim rule template, you can permit or deny access by users to the relying party based on the type and value of an incoming claim.

For example, you can use this rule template to create a rule that will permit only users that have a group claim with a value of "Domain Admins". If you want to permit all users to access the relying party, use the Permitting All Users rule template. Users who are permitted to access the relying party from the Federation Service may still be denied service by the relying party.

You can find incoming claims in the input claim set of the rules. For more information about the input claim set of the rules, see Using Claim Rules for Issuing Claims.

See Also

Did you find this helpful?
(1500 characters remaining)
Thank you for your feedback

Community Additions

ADD
Show:
© 2014 Microsoft. All rights reserved.