Hello @Ryan Esch ,
Thank you for reaching out Microsoft Q&A.
I Understand you have created security groups in Entra, and you want to add attributes to these groups, specifically sAMAccountName because you want to mimic Active Directory. This is a test environment, but production will be connected to AD. The goal is to be able to edit the group claim to return sAMAccountName instead of groupId, but that won't work unless the groups have sAMAccountName.
sAMAccountName
and on-premises GroupSID
attributes are available only on group objects synced from Active Directory. They aren't available on groups created in Microsoft Entra ID or Office 365. Applications configured in Microsoft Entra ID to get synced on-premises group attributes get them for synced groups only.
The supported formats for group claims are:
- Microsoft Entra group ObjectId: Available for all groups.
- sAMAccountName: Available for groups synchronized from Active Directory.
- NetbiosDomain\sAMAccountName: Available for groups synchronized from Active Directory.
- DNSDomainName\sAMAccountName: Available for groups synchronized from Active Directory.
- On-premises group security identifier: Available for groups synchronized from Active Directory.
for additional information: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-group-claims#group-claims-for-applications-migrating-from-ad-fs-and-other-identity-providers
Hope this helps. Do let us know if you any further queries.
If this answers your query, do click Accept Answer
and Yes
for was this answer helpful. And, if you have any further query do let us know.
Regards,
Goutam Pratti.