Associate Sitefinity CMS roles to external claims

When you use third party identity providers, such as ADFS, you can configure Sitefinity CMS to automatically maintain the membership of users in Sitefinity CMS roles when the role of a user in ADFS changes or a new user is created.

EXAMPLE: A user is assigned a new role in ADFS. You can map this role to a role in Sitefinity CMS. Then, all users that acquire the role in ADFS will be automatically assigned to the mapped role in Sitefinity CMS.

1. Navigate to Administration » Settings » Advanced.
2. In the left pane, expand Authentication » RelyingParty and click Claims to roles mappings.
3. Click Create new and fill out the following information:
   
   1. In Name, enter the name of the mapping.
      For example, enter PRgroupToAuthors
   2. In Claim type, enter the full name of the type of the external claim.
      For example, enter http://schemas.microsoft.com/ws/2008/06/identity/claims/role.
   3. In Claim value, enter the value of the external claim.
      For example, enter sitefinity.adfs\Domain Users. This means that a user with claim role is logged in as a domain user.
   4. In Mapped roles, enter a comma separated list of Sitefinity CMS roles that the claim will be mapped to.
      For example, enter BackendUsers, Administrators
4. Save your changes.
5. Restart the application.