adfs2.0 - ADFS 2.0 - using claim rules to find out when password expires -


i need adfs 2.0 tell relying party application when current user's password expire. basically, need extract data ad, using adfs claim rules, repeat logic of article: http://blogs.msdn.com/b/adpowershell/archive/2010/08/09/9970198.aspx

i can access user-level ad attribute "pwd-last-set" without problems (other changed value caching around 20 minutes), but:

  1. i can not access domain-level attributes (like max-pwd-age) claim rules. how can that?
  2. i can not find appropriate attributes of data, domainmode.

may there ready solution problem, googling skills weak find?

you can access ad attributes pertain logged-in user.

for kind of thing, suggest writing custom attribute store returns info. require.


Comments

Popular posts from this blog

java - activate/deactivate sonar maven plugin by profile? -

python - TypeError: can only concatenate tuple (not "float") to tuple -

java - What is the difference between String. and String.this. ? -