Hello,
I try to generate a PPID claim on ADFS windows 2019 with the rule (from
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/technical-reference/when-to-use-a-custom-claim-rule) :
c:[Type == "https://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname"]
=> issue(store = "_OpaqueIdStore", types = ("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/privatepersonalidentifier"), query = "{0};{1};{2}", param = "ppid", param = c.Value, param = c.OriginalIssuer);
But my setup is a two nodes ADFS Farm (with SQL cluster as a back end) behind a load balancer
My problem is that each node generate a different PPID for the same user.
To my understing adfs should generate the same PPID ?
Is it possible (and how) with _OpaqueIdStore to generate same PPID form different servers of the same ADFS farm ?
Thank you in advance.
