ADFS RP to Azure AD RP Migration

Question

Hello,

We are in the process of moving our Relay Parties trusts from on prem ADFS to Azure AD. I have a party trust setup with WebEx and it inlcudes some custom claim rules. Can someone help me in the proper formatting of these claims in Azure AD SSO?

1. => issue(Type = "optionalparams", Value = "MW=Pro");
2. => issue(Type = "optionalparams", Value = "FL=OFF");
3. => issue(Type = "optionalparams", Value = "RC=OFF");
4. => issue(Type = "optionalparams", Value = "RE=OFF");
5. c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
   => issue(store = "Active Directory", types = ("updateTimeStamp"), query = ";whenChanged;{0}", param = c.Value);

I am not sure if any of these are supported in Azure AD SSO. If so assitance in the proper formatting and setup would be greatly appreciated.

Thank You

Answer 1

1. Have you checked your app activity page for compatibility? https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/migrate-adfs-application-activity
2. Check this page too for mapping each field: https://learn.microsoft.com/en-us/azure/active-directory/manage-apps/migrate-adfs-apps-to-azure

Answer 2

But you would add them under custom attribute.

Answer 3

Hi JLight,

Thank you for the response. App compatibility shows everything is green and ready to move.

I think the custom attributes is what I was looking for and if their would be any special formatting, but from your example, looks pretty straight forward.

Answer 4

I have another question surrounding the "optionalparams" as the name.

When adding that claim its only allowing a single "optionalparams" name. I cannot add another claim name "optionalparams"

Based on the values, would use the MW as the name and the value as Pro