How to fix configure a Claim Transformation that returns a default value if user.telephonenumber is empty

Question

Having some trouble with SAML responses for an Azure AD Enterprise Application. The vendor is expecting a "phonenumber" field in the SAML response. I've tried to configure a Claim Transformation that returns a default value if user.telephonenumber is empty, but it does not seem to work as expected.

Answer 1

Hello @Myoung1976

Thank you for reaching out. I would like to confirm that specifying a static value on Claim Transformation rule would not be possible and we always need to use alternate user attribute from the drop down list. This can be a parameter 2 or when we use else condition. This has been documented on following article: Customize claims issued in the SAML token for enterprise applications.

If you would like to push telephone number as "+1-111111111" then you would need to use following method:

• If user is sync'd specify this default contact number in an extension attribute and sync that value to Azure AD.
  • To figure steps on how to sync directory extension from On-Prem AD to AAD you can refer following documentation link: Directory extensions
  • Make sure you publish value for this attribute to all users On-Prem.
• If the user is not sync'd you can create a new extension attribute on cloud user and publish the value for user on cloud extension attribute. To figure out more details please review: Set-AzureADUserExtension

Once these values are published you can use following transformation rules:

In above transformation rule the default contact/telephone number is published on 'userExtension.extension_bf39a950a3414b568f494fd764264485_homePhone'.

I hope this helps to resolve your query. Please "Accept the answer" if the information helped you. This will help us and others in the community as well.