![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the AD FS window, click Relying Party Trusts, and then right-click the applicable relying‑party trust.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Edit Claim Issuance Policy, and then Add Rule.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Claim rule template list, select Send LDAP Attributes as Claims.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
In the Claim rule name field, type GroupRule.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
From the Attribute store list, select Active Directory.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Set LDAP attribute to Token-Groups - Unqualified Names, and then set Outgoing Claim Type to MVEGroup.
![](https://publications.lexmark.com/media/ids_assets/images/transparent.png)
Click Finish.