title: Connect AD FS 3.0 to Shibboleth via SamAccountName Name ID
body: <p>I need to connect an AD FS 3.0 identity provider (idP) to a Shibboleth service provider / relying party I don't control. Unfortunatley, AD FS and Shibboleth don't quite use the same format for claims/attributes.</p>
  
  <p>There's a lot of information out there one the web about this, and the need for two rules (one to retrieve the value from Active Directory, and one to transform it to match what Shibboleth expects), but much of it is written for AD FS 2.0 or uses the e-mail address as the Name ID (I really need SamAccountName for this).</p>
  
  <p>How can I get my AD FS idP to produce a claim using the windows-account-name that Shibboleth will accept?</p>