Why does transformation doesn't work after IfEmpty() being used in Entra ID SAML Claim configuration

Giservin Tifira Zain 20

User's image

Based on above image, I do transformation with RegexReplace() after IfEmpty() being invoked. If it's true then it'll output the user.mail, so the RegexReplace operation should be done in user.mail, but why doesn't it work? and it only returns the mail but not doing the RegexReplace operation?

When I do it without IfEmpty, just one single RegexReplace Transformation operation, it works well

Giservin Tifira Zain 20 Reputation points

2024-07-18T04:15:57.7466667+00:00

In addition, I guess the problem is on the IfEmpty(), when I do IfEmpty to return user.mailnickname, it doesn't return the properties, instead it returns my email
Sandeep G-MSFT 19,436 Reputation points Microsoft Employee

2024-07-18T09:09:51.2733333+00:00

@Giservin Tifira Zain

Thank you for posting this in Microsoft Q&A.

I am looking into this issue and will get back to you post my research.
Giservin Tifira Zain 20 Reputation points

2024-07-19T03:44:46.79+00:00

after I tested it again, I guess the only one error is for claim : Unique User Identifier (Name ID)

I tried to add new claim and the result is right. It's only just for Name ID claim that doesn't seem to work (this claim works for single operation RegexReplace(), but not combined with IfEmpty() )
Giservin Tifira Zain 20 Reputation points

2024-07-19T03:51:18.5533333+00:00

after trying it again, it seems it only doesn't work on Unique Name Identifier claim, I tried it with other claim and it worked. The Unique Name Identifier only works with single operation of RegexReplace, but when combined with IfEmpty it just didn't work

Share via

Why does transformation doesn't work after IfEmpty() being used in Entra ID SAML Claim configuration

Your answer