Need to create Claim in Azure SSO

Question

Hello Team,

We are in a migration process of applications from ADFS server to Azure Enterprise applications but during the migration, we are also migrating the claims but I am not able to understand, how to migrate the below claim in Azure from ADFS:

c:[Type == "http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname", Issuer == "AD AUTHORITY"]
=> issue(store = "Active Directory", types = ("updateTimeStamp"), query = ";whenChanged;{0}", param = c.Value);

Can anyone suggest the method.

Regards,
Shashank Saxena

Answer 1

Hi @Anonymous • Thank you for reaching out.

As of now, Azure AD doesn't provide capability to write custom claims rules. So, you can't migrate exact claim rules from ADFS. The closest to the above claim rule you can create is, add below claim to your enterprise application > SAML-based sign-on > User attributes and claims:

Note: To use above claim, make sure that you have sync rule in AD Connect to sync windowsaccountname (from on-premises AD) as onPremisesSamAccountName to Azure AD and is synced by default.

You may post a feedback for adding this capability at Azure Feedback Platforms, which is monitored by the product team for product enhancements.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.