customize claims issued in the SAML token for enterprise applications in Azure AD

Question

customize claims issued in the SAML token for enterprise applications in Azure AD

Eldad Somech 21

Hi,

i wanted to know if there any option to configure claims in Azure AD enterprise application for FQDN claim.

we're syncing to Azure AD 16 subdomains, how should I identify from which domain user is coming?
the UPN claim is showing as "constoso.org.il" is it possible to have a claim with "blabla.contoso.org.il"
if it's not possible, is there any other option as FQDN?

Thanks a lot!

Answer 1

soumi-MSFT 11,651 Microsoft Employee

@Eldad Somech , There is no way to get FQDN as a claim in Azure AD. But once you receive the SAML response, you can fetch the UPN claim sent for the user and then parse out the domain suffix from the UPN in your code.

Eldad Somech 21 Reputation points

2020-01-06T17:26:30.377+00:00

Thanks soumi!

any other alternative you can think of? or it is the only way?

Thanks !
soumi-MSFT 11,651 Reputation points Microsoft Employee

2020-01-06T17:30:05.777+00:00

@Eldad Somech , This is the only way available, as there is no way to send the FQDN in a claim, also there is no possible way available to parse this value within the claims.
For now, you would have to go ahead fetching the UPN and then splitting the domain suffix and then using it.

-------------------------------------------------------------

Please do mark the response as answered, if that answered your query.
Eldad Somech 21 Reputation points

2020-01-07T08:05:32.023+00:00

Thanks for that.

customize claims issued in the SAML token for enterprise applications in Azure AD

0 additional answers

Activity