Claims Transformation for SAML NameId using Graph API

Avinash Banjan 1 Reputation point
2022-11-16T12:53:27.983+00:00

Hello,

I have a requirement, wherein I need to have a custom claims transformation for SAML NameID using ExtractMailPrefix() and Join() to modify the email's domain part and pass it as a value for NameID using graph api. Could you please guide me to any available example or any pointer how can this be achieved ?

Thanks & Regards,
Avi

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,593 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Alfredo Revilla - Upwork Top Talent | IAM SWE SWA 27,246 Reputation points
    2022-11-18T17:08:51.69+00:00

    Hello @Avinash Banjan and thanks for reaching out. For NameID claim transformation, the Join() function has specific behavior when the transformation input has a domain part. It will remove the domain part from input before joining it with the separator and the selected parameter. For example, if the input of the transformation is ‘joe_smith@Company portal .com’ and the separator is ‘@’ and the parameter is ‘fabrikam.com’, this will result in joe_smith@fabrikam.com.

    For how to configure claims mapping and transformation (with samples) please take a look at Configure SAML-based single sign-on for your application using the Microsoft Graph API

    Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution..