Purpose:
Allow user from an Oracle IDM environment to connect to SP sites using SAML auth (same domain as SP)
SP 2013 web apphttp://sp2013dev4.ddd.com
Auth Provider = Claims NTLM and also a custom Trusted IDP
Steps:
When we access the URL above - we are presented with a drop down for either Windows Auth or the custom trusted IDP
We select Windows Auth and taken into the site
We select the custom trusted IDP and then are taken to the Oracle env login page. We then enter those credentials successfully and are directed back to the SP site - but at this point
SP redirects us back to the sign-in page with the drop down options.
We are using a single claim mapping for email address:
$map = New-SPClaimTypeMapping -IncomingClaimType "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress"
-IncomingClaimTypeDisplayName "EmailAddress" -SameAsIncoming
Custom IDP was created using this:
$signInURL = "https://"sso environment"/oamfed/idp/samlv11sso?providerid=urn%3asharepoint%3asp2013dev4.wyn.com&"
$siterealm = "urn:sharepoint:sp2013dev4.ddd.com"
$ap1 = New-SPTrustedIdentityTokenIssuer -Name $name -Description “SharePoint Secured by SAML” -realm $siterealm -ImportTrustCertificate $cert -ClaimsMappings $map -SignInUrl $signInURL -IdentifierClaim $map.InputClaimType -RegisteredIssuerName $siterealm
Have this in the logs but not sure if it applies:
SPFederationAuthenticationModule.IsRedirectToLogOnPage: Detected a redirection but the redirect is not to a known signin page:http://sp2013dev4.ddd.com/_layouts/15/Authenticate.aspx?Source=%2F