In its simplest form, claims are simply statements (for example, name, identity, group), made about users, that are used primarily for authorizing access to claims-based applications located anywhere on the Internet. Each statement corresponds to a value that is stored in the claim.
A claim typically consists of an Active Directory user attribute, such as the user principal name (UPN) or email address. A security token bundles the set of claims about a particular user in the form of a Security Assertion Markup Language (SAML) assertion.
ClaimType is a string that tells you what the claim means. E.g. (typically a URI): http://schemas.xmlsoap.org/ws/2005/05/identity/claims/dateofbirth.
ClaimTypes.Name is for username and ClaimTypes. NameIdentifier specifies identity of the user as object perspective.
OASIS owns the http://schemas.xmlsoap.org/ws/2005/05/identity namespace, but I can't find anywhere that defines the "name" claim type. There are other claims like First Name, Last Name, Email Address, etc. but no claim that just refers to Name.
Is there an authoritative location where this claim type is defined? I'm interested in understanding the correct usage of this claim.
If you love us? You can donate to us via Paypal or buy me a coffee so we can maintain and grow! Thank you!
Donate Us With