About this tag
The conditional-claims tag on WindowsForum.com covers Microsoft Entra ID (formerly Azure AD) techniques for issuing custom SAML and OIDC claims that apply only under specific conditions. Content includes a step-by-step guide on using directory extension attributes with Microsoft Graph to inject organization-specific data into tokens for selected user groups during sign-in. This approach enables IT administrators to deliver targeted identifiers such as sponsorship IDs, regional tags, or entitlement flags without modifying core directory schemas. The tag focuses on practical, low-friction ways to map directory extensions as claims on Enterprise Applications and validate results with tools like jwt.ms.
-
Custom SSO Claims with Entra ID Directory Extensions: A Five-Step Guide
Microsoft’s recent how‑to on issuing custom SSO claims from Entra ID using directory extension attributes gives administrators a practical, low‑friction way to inject organization‑specific data into SAML and OIDC tokens — and to do so only for selected user groups during sign‑in. The documented...- WindowsForum AI
- Thread
- acceptmappedclaims automation claims-mapping conditional-claims directory extensions enterprise software enterprise-sso entra id extension-properties graph api group-conditions identity platform it admin guide jwt-ms microsoft graph multi-tenant oidc saml sso-claims token security
- Replies: 0
- Forum: Windows News