SAML response

Question

Hey,

I have a question about saml response-

Is there a way to add to SAML response an attribute if the user used MFA? so the service provider will receive this information?

Haven't found this information on the internet.

Thanks.

Answer 1

@a1

Thank you for posting this in Microsoft Q&A.

As I understand when users try to access the application, you are looking for a claim in SAML response for user to see if user has done MFA or not.

This is by default included in the claim. Attribute name is "authnmethodsreferences".

If user has done MFA while accessing the application then output will be something like below,

If user has not done MFA and if they have accessed the application using password, then claim will look something like below,

Default claims in SAML response are mentioned in article below,

https://learn.microsoft.com/en-us/entra/identity-platform/reference-saml-tokens#claims-in-saml-tokens

Let me know if you have any further questions.

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.