Paste Mediaflow's claim rule – Mediaflow Knowledge Base

Under Claim rule name, enter Mediaflow Claims.
Under Custom rule, paste this rule exactly as written:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
 => issue(store = "Active Directory", types = ("email", "given_name", "family_name", "name", "groups"), query = ";mail,givenName,sn,displayName,tokenGroups(domainQualifiedName);{0}", param = c.Value);

Select Finish, then OK twice.

The Configure Rule page with the rule name Mediaflow Claims and Mediaflow's custom rule for OpenID Connect pasted in.

The rule sends each user's email address, first name, surname and display name, and the groups they belong to as DOMAIN\Group name, under the claim names Mediaflow reads from the ID token.