sso-claims

SSO claims are custom attributes injected into SAML or OIDC tokens during single sign-on with Microsoft Entra ID. A recent Microsoft guide demonstrates how to issue custom SSO claims using directory extension attributes, allowing administrators to add organization-specific data such as sponsorship IDs or regional tags to tokens. The process involves registering extension attributes via Microsoft Graph, assigning values to user objects, mapping them as claims on an Enterprise Application, and validating with a test sign-in. This enables targeted claims for selected user groups without modifying core directory schema, giving IT teams flexible control over token content for federated applications.