Identifierclaim in SPTrustedIdentityTokenIssuer

I’m trying to configure an SPTrustedIdentityTokenIssuer but I always get the error:

IdentifierClaim does not match any claim type specified in ClaimsMappings.

What am I missing?

       SPTrustedIdentityTokenIssuer AzureAD
        {
            Name                = "AzureAD";
            Description         = "Azure AD Identity provider";
            Realm               = "urn:sharepoint:sp1";
            SignInUrl           = "https://login.microsoftonline.com/[GUID removed]/wsfed";
            IdentifierClaim     = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name";
            ClaimsMappings        = @(
                MSFT_SPClaimTypeMapping{
                    Name = "name";
                    IncomingClaimType = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name";
                    LocalClaimType ="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn";
                }
                MSFT_SPClaimTypeMapping{
                    Name = "Email";
                    IncomingClaimType = "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress";
                }
                MSFT_SPClaimTypeMapping{
                    Name = "Role";
                    IncomingClaimType = "http://schemas.microsoft.com/ws/2008/06/identity/claims/role";
                }
            )
            SigningCertificateFilePath = "C:\cert.cer";
            Ensure                = "Present";
            PsDscRunAsCredential  = $SPSetupAccount;
        }

[ykuijs]

UPDATE: Correction to my first conclusion. Have checked the innerworking a little more and the error is in the code.

Found the root cause for this issue:

In the Set method, this code creates an array with Claims Mappings: https://github.com/dsccommunity/SharePointDsc/blob/8214236e27d0a67c1fd5acea64d889dd38373c0e/SharePointDsc/DSCResources/MSFT_SPTrustedIdentityTokenIssuer/MSFT_SPTrustedIdentityTokenIssuer.psm1#L283-L299

The next block of code then checks if the specified IdentifierClaim matches a MappedClaimType in any of the claims in the array: https://github.com/dsccommunity/SharePointDsc/blob/8214236e27d0a67c1fd5acea64d889dd38373c0e/SharePointDsc/DSCResources/MSFT_SPTrustedIdentityTokenIssuer/MSFT_SPTrustedIdentityTokenIssuer.psm1#L283-L299

This is where the code fails. It should check against the InputClaimType property instead of the MappedClaimType property. Will update the code and submit a PR!

[bartvermeersch]

Sorry I didin’t follow up, I had to switch project. Thank you @ykuijs for the fix! (I also missed the issue in the code)