adfs2.0 - ADFS 2.0 - using claim rules to find out when password expires -
i need adfs 2.0 tell relying party application when current user's password expire. basically, need extract data ad, using adfs claim rules, repeat logic of article: http://blogs.msdn.com/b/adpowershell/archive/2010/08/09/9970198.aspx
i can access user-level ad attribute "pwd-last-set" without problems (other changed value caching around 20 minutes), but:
- i can not access domain-level attributes (like max-pwd-age) claim rules. how can that?
- i can not find appropriate attributes of data, domainmode.
may there ready solution problem, googling skills weak find?
you can access ad attributes pertain logged-in user.
for kind of thing, suggest writing custom attribute store returns info. require.
Comments
Post a Comment