Previous Topic: Identify your Trusted Identity ProviderNext Topic: Verify the New Claim Exists


Add a Claim to your Trusted Identity Provider

Adding a claim to your CA SiteMinder trusted identity provider involves several steps using the SharePoint 2010 Management Console. This example adds a claim for the last name of a user to the CA SiteMinder trusted identity provider. Use this example as a guide to add any claim you want to your CA SiteMinder trusted identity provider.

Follow these steps:

  1. Enter the following command to assign the name of your CA SiteMinder trusted identity provider to a variable:
    $trutsed_identity_provider_variable_name = Get-SPTrustedIdentityTokenIssuer -Identity "name_of_siteminder_trusted_identity_provider"
    
  2. Enter the following command to add a claim type that is based on the last name of a user:
    $map2 = New-SPClaimTypeMapping -IncomingClaimType "http://schemas.xmlsoap.org/claims/lastname" -IncomingClaimTypeDisplayName "role" -LocalClaimType "http://schemas.xmlsoap.org/claims/lastname"
    
  3. Enter the following command to associate the new claim type with your CA SiteMinder trusted identity provider:
    $map2 | Add-SPClaimTypeMapping -TrustedIdentityTokenIssuer $trutsed_identity_provider_variable_name
    

    The new claim is added to your trusted identity provider.