Does the near-equivalence between DOMAIN\username and username@DOMAIN only hold for users or also for groups? In particular, can ADFS clients that request groups as claims with option Token-Groups - Qualified by Long Domain Name assume that the format for each entry will be DOMAIN\groupname, or do they have to accommodate both styles?

  • 375
  • 3
  • 14

0 Answers0