Azure AD : Attribute that need XML value

Question

Azure AD : Attribute that need XML value

NdDevOps 26

How do i pass the value of an attribute in XML format when i use Azure AD as Identity provider ?
I have configured the value of the Attribute to the below value

<ClientOrganizations>
<ClientName>test_client</ClientName>
</ClientOrganizations>

When i post the SAML to the Service provider, the value of the attribute they receive has the below value ( & is getting changed to &)

<ClientOrganizations> <ClientName>test_client</ClientName> </ClientOrganizations>

How do i resolve this ?

ShashiShailaj-MSFT 7,411 Reputation points Microsoft Employee

2020-09-09T18:59:45.96+00:00

@NdDevOps , Generally posting SAML token obtained from Azure AD Identity provider does not have those details where & is changed to amp; . You may require to collect a fiddler trace while trying to repro the issue in order to get more information on this. Also token modification can be done by reverse proxy's or security appliances in your flow. & is a bitwise operator and to avoid any malicious attempts to execute any arbitrary code some security products can apply this method of transforming any operator in the packets to something harmless. like in this case & is being converted to & . I am not sure of exact cause but it seems that the token is being modified. If you mean attribute in the token then following is snippet of SAML token form AzureAD .
ShashiShailaj-MSFT 7,411 Reputation points Microsoft Employee

2020-09-09T19:05:33.343+00:00

@NdDevOps , Most probably , in your case there is something on the network which may be causing this. I would suggest you to collect a network trace using fiddler while reproducing the issue as mentioned in my last comment above . This may need further troubleshooting. Please check your network flow and that may give you some insights . If not we will help you with alternate support options once you have collected the fiddler trace. Let us know what you find and we will continue helping you on this further.

ShashiShailaj-MSFT 7,411 Reputation points Microsoft Employee

2020-09-09T18:59:45.96+00:00

@NdDevOps , Generally posting SAML token obtained from Azure AD Identity provider does not have those details where & is changed to amp; . You may require to collect a fiddler trace while trying to repro the issue in order to get more information on this. Also token modification can be done by reverse proxy's or security appliances in your flow. & is a bitwise operator and to avoid any malicious attempts to execute any arbitrary code some security products can apply this method of transforming any operator in the packets to something harmless. like in this case & is being converted to & . I am not sure of exact cause but it seems that the token is being modified. If you mean attribute in the token then following is snippet of SAML token form AzureAD .
ShashiShailaj-MSFT 7,411 Reputation points Microsoft Employee

2020-09-09T19:05:33.343+00:00

@NdDevOps , Most probably , in your case there is something on the network which may be causing this. I would suggest you to collect a network trace using fiddler while reproducing the issue as mentioned in my last comment above . This may need further troubleshooting. Please check your network flow and that may give you some insights . If not we will help you with alternate support options once you have collected the fiddler trace. Let us know what you find and we will continue helping you on this further.

Azure AD : Attribute that need XML value

Activity