Is there any way to send static value claims in SAML token, based on the group membership of the user?

Question

We have to send a static value (approved or not approved) in SAML token, based on the condition that if the user is part of a particular group or not.
But based on my research, there is no way to send conditional claims in SAML token.
Is there a alternate solution to this problem?

Answer 1

Hello @Rajat Bakshi ,

Thanks for reaching out.

Based on your question, I understand you want a static SAML claim based on the user's group membership. Please correct me if I have misread anything.

You may customize claims issued in the SAML token for enterprise applications, and you can also emit static claims based on the user's group membership, as illustrated below. For further information, see this article.

For an example, from my lab I test condition-based claims based on the user's membership in Group A with a static value of "Approved," so that when the user authenticates to this application, Azure AD emits a static claim if the user is a member of "Group A."

Steps to create condition-based claims:

Condition Based calim

Outcome:

-----
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.