Centrify requires scripting to work with RiskTool.  In the advanced section in the Centrify application profile you will need the following:


setIssuer(Issuer);
setSubjectName(UserIdentifier);
setAudience('https://YOURURL.risktool.com/portal');
setRecipient(ServiceUrl);
setHttpDestination(ServiceUrl);
setSignatureType('Assertion');
setNameFormat('persistent');
setAttribute("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname", LoginUser.LastName);
setAttribute("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname", LoginUser.FirstName);
setAttribute("http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress", LoginUser.Get("mail"));


Change setAudience to your custom URL if not already there.

setSignatureType will be Response by default and needs to be changed to Assertion.