<html><body><div style="color:#000; background-color:#fff; font-family:HelveticaNeue-Light, Helvetica Neue Light, Helvetica Neue, Helvetica, Arial, Lucida Grande, sans-serif;font-size:16px"><div id="yui_3_16_0_1_1424311359430_2803" dir="ltr"> Hi,</div><div id="yui_3_16_0_1_1424311359430_3077" dir="ltr"><br></div><div id="yui_3_16_0_1_1424311359430_3078" dir="ltr">I tested out the SAML broker functionality that is listed in the below example</div><div id="yui_3_16_0_1_1424311359430_2805"><a id="yui_3_16_0_1_1424311359430_2804" href="https://github.com/keycloak/keycloak/tree/master/examples/broker/saml-broker-authentication">https://github.com/keycloak/keycloak/tree/master/examples/broker/saml-broker-authentication</a></div><div id="yui_3_16_0_1_1424311359430_3086"><br></div><div id="yui_3_16_0_1_1424311359430_2827" dir="ltr">We have a very important use case that is similar to the above except that the SAML Identity broker is ADFS and a few issues are preventing me from testing it out:</div><div id="yui_3_16_0_1_1424311359430_3140" dir="ltr"><br></div><div id="yui_3_16_0_1_1424311359430_2888" dir="ltr">1) The ADFS IDP requires that I upload the KC SAML broker information (SAML metadata) which is not available currently. Perhaps I can generate my own metadata using the above example but would prefer KC to provide one that is similar to IDP metadata that is listed in the documentation.</div><div id="yui_3_16_0_1_1424311359430_2940" dir="ltr">2) The ADFS IDP metadata has RoleDescriptor element that is not currently being parsed by the KC SAML broker. I logged my issues in the JIRA <a id="yui_3_16_0_1_1424311359430_2941" href="https://issues.jboss.org/browse/KEYCLOAK-883">https://issues.jboss.org/browse/KEYCLOAK-883</a></div><div id="yui_3_16_0_1_1424311359430_2993" dir="ltr">3) The roles and other claims need to passed back to the client applications using OIDC (I am aware that Bill is making some functionality available over the next few days and hopefully it will address my requirement) </div><div id="yui_3_16_0_1_1424311359430_2956" dir="ltr"><br></div><div id="yui_3_16_0_1_1424311359430_3206" dir="ltr">Any suggestions on how I handle the first two? </div><div id="yui_3_16_0_1_1424311359430_3132" dir="ltr"><br></div><div id="yui_3_16_0_1_1424311359430_3197" dir="ltr">Thanks,</div><div id="yui_3_16_0_1_1424311359430_3198" dir="ltr">Raghu</div><div id="yui_3_16_0_1_1424311359430_2849"><br></div></div></body></html>