Merge pull request #1997 from Whats-A-MattR/azure2name_attributemap

monkeyiq · web-flow · commit 4b40d4eee851 · 2024-05-29T09:16:43.000+10:00
Azure2Name Attribute Mapping for SAML Claims
diff --git a/attributemap/entra2name.php b/attributemap/entra2name.php
@@ -0,0 +1,25 @@
+<?php
+
+$attributemap = [
+    /**
+     * Renamed Attributes to match other 2name mappings
+     */
+    "http://schemas.microsoft.com/identity/claims/objectidentifier" => 'uid',
+    "http://schemas.microsoft.com/identity/claims/displayname" => 'displayName',
+    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" => 'givenName',
+    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" => 'sn',
+    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" => 'emailAddress',
+    "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" => 'mail',
+    
+    /**
+     * Additional/Optional Claim, using default value
+     */
+    "http://schemas.microsoft.com/ws/2008/06/identity/claims/groups" => 'groups',
+
+    /**
+     * Additional Attributes from Entra
+     */
+    "http://schemas.microsoft.com/claims/authnmethodsreferences" => 'authNMethodsReferences',
+    "http://schemas.microsoft.com/identity/claims/identityprovider" => 'idp',
+    "http://schemas.microsoft.com/identity/claims/tenantid" => 'tenantId',
+];
diff --git a/attributemap/name2entra.php b/attributemap/name2entra.php
@@ -0,0 +1,25 @@
+<?php 
+
+$attributemap = [
+    /**
+     * Renamed Attributes to match other 2name mappings, mapped back to default Entra claim names
+     */
+    'uid' => 'http://schemas.microsoft.com/identity/claims/objectidentifier',
+    'displayName' => 'http://schemas.microsoft.com/identity/claims/displayname',
+    'givenName' => 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname',
+    'sn' => 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname',
+    'emailAddress' => 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress',
+    'mail' => 'http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name',
+    
+    /**
+     * Additional/Optional Claim, using default value, mapped back to original claim names
+     */
+    'groups' => 'http://schemas.microsoft.com/ws/2008/06/identity/claims/groups',
+
+    /**
+     * Additional Attributes from Entra, mapped back to original claims
+     */
+    'authNMethodsReferences' => 'http://schemas.microsoft.com/claims/authnmethodsreferences',
+    'idp' => 'http://schemas.microsoft.com/identity/claims/identityprovider',
+    'tenantId' => 'http://schemas.microsoft.com/identity/claims/tenantid',
+];
