Export SAML-based Sign-on Attributes & Claims

Paul Flaherty 1

I want to automate an export of all Applications / service principals with PreferredSingleSignOnMode = saml and export the SAML-based Sign-on Attributes & Claims.

Have hunted around for code but can't find anything.

Can this actually be done using Graph API?

Navya 10,955 Reputation points Microsoft Vendor

2024-09-23T05:06:10.25+00:00

Hi @Paul Flaherty

Thank you for posting this in Microsoft Q&A.

I understand that you want to automate the export of all applications and service principals that use SAML-based single sign-on (SSO) and retrieve their SAML-based sign-on attributes and claims using the Microsoft Graph API.

Yes, it is possible to achieve this using the Microsoft Graph API.

Please go through this document to Configure SAML-based single sign-on for your application using Microsoft Graph

Hope this helps. Do let us know if you any further queries.

Thanks,

Navya.
Paul Flaherty 1 Reputation point

2024-09-23T10:50:16.9133333+00:00

Thanks Navya.

I need to get SAML-based sign-on attributes and claim from existing SSO that have already been created using the web interface,

When I run get-MgPolicyClaimMappingPolicy I get nothing returned.
Navya 10,955 Reputation points Microsoft Vendor

2024-09-24T14:57:32.6866667+00:00
Hi @Paul Flaherty

To list the claimsMappingPolicy objects that are assigned to a servicePrincipal use below command

Import-Module Microsoft.Graph.Applications Connect-MgGraph -Scopes "Policy.Read.All","Application.ReadWrite.All" Get-MgServicePrincipalClaimMappingPolicy -ServicePrincipalId <oid>
Navya 10,955 Reputation points Microsoft Vendor

2024-09-26T01:59:14.34+00:00

Hi @Paul Flaherty

Just checking in to see if above information was helpful. If you have any further updates on this issue, please feel free to post back.
Paul Flaherty 1 Reputation point

2024-09-26T08:58:25.8533333+00:00

Same as before, no data returned

Share via

Export SAML-based Sign-on Attributes & Claims

Your answer