extension-properties

Extension properties in Microsoft Entra ID (formerly Azure AD) allow administrators to add custom attributes to directory objects and use them in SSO claims. A recent guide demonstrates a five-step process: registering directory extension attributes via Microsoft Graph, assigning values to user objects, mapping the extensions as claims on an Enterprise Application, and validating the result with a test sign-in. This enables IT teams to inject organization-specific data such as sponsorship IDs, regional tags, or entitlement flags into SAML and OIDC tokens, targeting only selected user groups. The approach provides a low-friction way to customize token claims without custom development, leveraging existing directory schema extensions.