How to include Optional claim in azure ad app registration?

Question

We would like to include additional value into the token which we will be extract from the token while Authorize.

We tried as per the document(https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims). The thing is we choosen upn, and as part of body we are sending the same like "upn": "user_detail". But it is not included as part of token.

What are the configs to change make it work?

Answer 1

Make sure that you have added the profile scope, as "upn" requires the profile scope. You can add the profile scope under API Permissions (Type = delegated). https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-optional-claims#v20-specific-optional-claims-set

The type name is http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn

I assume you are using regular Azure AD, but if by some chance you are using B2C, the unique name is stored in the signInNames attribute and upn is not used.