Map an organization group claim to an Active Directory group (group claim extraction)
Updated: September 13, 2007
Applies To: Windows Server 2003 R2
When you use Active Directory as the Active Directory Federation Services (ADFS) account store for an account Federation Service, you map an organization group claim to a security group in Active Directory. This mapping is called a group claim extraction.
Perform this procedure in the account Federation Service.
To complete this procedure, you must be a member of the Administrators group on the local computer.
To map an organization group claim to an Active Directory group
Click Start, point to Administrative Tools, and then click Active Directory Federation Services.
Double-click Federation Service, double-click Trust Policy, double-click My Organization, double-click Account Stores, right-click Active Directory, point to New, and then click Group Claim Extraction.
In the Create a New Group Claim Extraction dialog box, click Add, and then select the Active Directory security group that you want to map to a group claim.
In Map to this Organization Claim, select the group claim to map to the Active Directory security group, and then click OK.