{"action":"opened","issue":{"url":"https://api.github.com/repos/docker/docker.github.io/issues/7941","repository_url":"https://api.github.com/repos/docker/docker.github.io","labels_url":"https://api.github.com/repos/docker/docker.github.io/issues/7941/labels{/name}","comments_url":"https://api.github.com/repos/docker/docker.github.io/issues/7941/comments","events_url":"https://api.github.com/repos/docker/docker.github.io/issues/7941/events","html_url":"https://github.com/docker/docker.github.io/issues/7941","id":394702695,"node_id":"MDU6SXNzdWUzOTQ3MDI2OTU=","number":7941,"title":"documentation too vauge: Enable SAML Authentication","user":{"login":"sc10n","id":10691748,"node_id":"MDQ6VXNlcjEwNjkxNzQ4","avatar_url":"https://avatars0.githubusercontent.com/u/10691748?v=4","gravatar_id":"","url":"https://api.github.com/users/sc10n","html_url":"https://github.com/sc10n","followers_url":"https://api.github.com/users/sc10n/followers","following_url":"https://api.github.com/users/sc10n/following{/other_user}","gists_url":"https://api.github.com/users/sc10n/gists{/gist_id}","starred_url":"https://api.github.com/users/sc10n/starred{/owner}{/repo}","subscriptions_url":"https://api.github.com/users/sc10n/subscriptions","organizations_url":"https://api.github.com/users/sc10n/orgs","repos_url":"https://api.github.com/users/sc10n/repos","events_url":"https://api.github.com/users/sc10n/events{/privacy}","received_events_url":"https://api.github.com/users/sc10n/received_events","type":"User","site_admin":false},"labels":[],"state":"open","locked":false,"assignee":null,"assignees":[],"milestone":null,"comments":0,"created_at":"2018-12-28T19:20:30Z","updated_at":"2018-12-28T19:20:30Z","closed_at":null,"author_association":"NONE","body":"File: [ee/ucp/admin/configure/enable-saml-authentication.md](https://docs.docker.com/ee/ucp/admin/configure/enable-saml-authentication/)\r\n\r\nThe documentation for ADFS settings for SAML is very vague and misleading. \r\n\r\n```\r\n* Attribute Store: Active Directory.\r\n  - Add LDAP Attribute = Email Address; Outgoing Claim Type: Email Address\r\n  - Add LDAP Attribute = Display-Name; Outgoing Claim Type: Common Name\r\n* Claim using Custom Rule. For example, c:[Type == \"http://schemas.xmlsoap.org/claims/CommonName\"] => issue(Type = \"fullname\", Issuer = c.Issuer, OriginalIssuer = c.OriginalIssuer, Value = c.Value, ValueType = c.ValueType);\r\n* Outgoing claim type: Name ID\r\n* Outgoing name ID format: Transient Identifier\r\n* Pass through all claim values\r\n```\r\n\r\nThis says that these are required values for ADFS settings. However, it doesn't specify which claim to use? Do we use all three? If so, the second and third ones are incomplete, what type of claim rule is the third one supposed to be? What are the incoming claims supposed to be? I would recommend specifying claim rule type and specifics for the rule. "}}
{"actor":{"display_login":"sc10n"}}