conditional-claims

The conditional-claims tag on WindowsForum.com covers Microsoft Entra ID (formerly Azure AD) techniques for issuing custom SAML and OIDC claims that apply only under specific conditions. Content includes a step-by-step guide on using directory extension attributes with Microsoft Graph to inject organization-specific data into tokens for selected user groups during sign-in. This approach enables IT administrators to deliver targeted identifiers such as sponsorship IDs, regional tags, or entitlement flags without modifying core directory schemas. The tag focuses on practical, low-friction ways to map directory extensions as claims on Enterprise Applications and validate results with tools like jwt.ms.