Duplicate ADFS claims in Azure

Skip Hofmann 341 Reputation points
2021-10-04T17:00:57.117+00:00

Hello
First time working with saml . Can you please help me understand how to duplicate the below claims from ADFS in Azure?
137485-image.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,436 questions

4 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. Skip Hofmann 341 Reputation points
    2021-10-04T21:22:12.527+00:00

    Okay, thank you

    0 comments
  2. James Hamil 21,546 Reputation points Microsoft Employee
    2021-10-04T21:43:56.323+00:00

    Hi @Skip Hofmann , I saw that you posted a very similar question here last week: https://learn.microsoft.com/en-us/answers/questions/563987/how-to-duplicate-claim-in-azure-enterprise-apps.html

    Did this answer not solve your question? Or was there something else you needed? Please let me know and I can help you further.

    Best,
    James

    0 comments
  3. Skip Hofmann 341 Reputation points
    2021-10-04T22:56:31.733+00:00

    looking for guidance on how to configure the claim rule in Azure. The provided answer didnt mention how to create the same claim rule in azure

    0 comments
  4. Siva-kumar-selvaraj 15,546 Reputation points
    2021-11-02T13:46:21.01+00:00

    Hello @Skip Hofmann ,

    I did repro on my lab and here are my finings.

    The following attributes ( user.mail , user.displayname, user.givenname & user.surname ) of users would get synchronized when you have Azure AD hybrid setup in place, here are list of attributes that are synchronized to Azure AD so configuring additional claims would be straight forward except this custom attribute "UMassISISD" which need additional configuration as explained below to achieve.

    Steps to create claims to send following attributes ( user.mail , user.displayname, user.givenname & user.surname )
    --
    Click on Add new claim from SAML-based Sign-on and select appropriate "Source attribute" also type in "Namespace" as shown below:

    145775-image.png

    Steps to create claims to send custom attribute like "UMassISISD" as NameID
    ---
    Firstly, you need perform directory extensions as explained here to extend the schema in Azure Active Directory (Azure AD) with your own attributes (like "UMassISISD" ) from on-premises Active Directory.

    Once that has completed then you must see your own custom attribute in extension format like extension_1234xxxxxxxxxx789_UMassISISD from source attribute drop down as shown below when you configure NameID format. To know more about NameID format and supported attributes , then refer this guidance . Hope this helps.

    145852-image.png

    ------
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments