How to implement custom role authorization in ADFS in ASP.Net MVC2?

Question

I am new to ADFS and Custom Role settings, so any help (and a lot of patience) will be greatly appreciated.

I am trying to configure ADFS with custom authorization. I have ADFS configured to return the application to me, from there I can get the username from the name token. However, I already have an existing role table that I need to map to the username from the token and set up a session object to reflect its roles?

I assume that I am very confused (besides what now looks like everything now), when the application returns, which controller gets token processing?

Before changing my application to use ADFS authentication, it will be:
1) click on the AccountController,
2) check the user and 3) establish an Asp.net session to store user information.

Now when I use ADFS, it seems to authenticate the user and then populate the session, not knowing where to intercept and enter the user role code?

Can someone suggest some direction?

Answer 1

What you need to do is send across all AD groups in some ADFS rule, and then convert these roles to groups in another rule. Let me know if you would like more detailed instructions.