On the Active Directory system, go to Server Manager Tools Select Active Directory Federation Services Management.
On the Active Directory Federation Services screen, click Relying Party Trusts.
On the Relying Party Trusts screen, right-click the newly added entry and select Edit Claims Issuance Policy.
Click Add Rule.
On the Select Rule Template screen, in the Claim Rule Template field, select Send LDAP Attributes as Claims.
On the Configure Claim Rule page, enter a name in Claim Rule Name.
ADDITIONAL INFORMATION:
For example, you can enter the E-mail address.
Select the Active Directory configured as the Attribute Store.
In the Mapping of LDAP Attributes to outgoing claim types section, select the LDAP attribute to be mapped to Outgoing Claim Type.
Click Finish.
Result
This setting will enable Active Directory Federation Services to send the authenticated user email address as a SAML Attribute statement when responding to Authorization Service with a SAML assertion.
