Share via

Can Azure support AttributeQuery profile of SAML2?

Alice Favre 6 Reputation points
2021-09-20T10:09:55.693+00:00

Hello,

We would like to use Azure AD to answer AttributeQuery requests in SAML2, so that the number of attributes (and their choice) sent back, can be dependant of the connecting SP. For example:

  • for SP1 I only want to distribute Attribute2 and Attribute 3,
  • for SP2 I only want to send it back Attribute1.
  • ...
  • for SPn I want to send it Attribute X, ..., Attribute Y, Attribute Z

I only want to use a single Entreprise Application.

In SAML2 AttibuteQuery profile allows you to send in every Request the list of attributes you want to receive back from the IdP.

Does Azure supports something like this ?

Thanks in advance,

Microsoft Security Microsoft Entra Microsoft Entra ID

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Siva-kumar-selvaraj 15,721 Reputation points
    2021-09-28T18:56:19.32+00:00

    Hello @Alice Favre ,

    Thanks for reaching out.

    Azure AD doesn't support Attribute Query profile. Therefore, only supported way is to add specific claim to respective application using claim mapping. To know more about : https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization

    Hope this helps.

    ------
    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.