using Thinktecture.IdentityServer3 as a Federation Provider with transforming of claims

Question

Hello I have been trying to work out how I could configure IdentityServer3 to become a multi-tenant federation provider that can transform and enrich claims coming back from say ADSF, Google+, Microsoft Account.

Does anyone have any example code of somebody trying to do the following?

MyWebApp(multi-tenant) <-- IdSrv3 <---- ADFS
                            ^
                            |<------- Google+
                            |<------- Microsoft Account
                            |<------- Facebook Account

Answer 1

You need to implement the IUserService - epeciall the AuthenticateExternalAsync method. There you receive the external claims and programmatically transform them.

https://identityserver.github.io/Documentation/docs/advanced/userService.html