Configure Azure Active Directory Security Groups for use with SharePoint on-premises

Hi Melissa

Great addition to the original article about how to bind sp onprem with azure ad directly.

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/sharepoint-on-premises-tutorial#test-single-sign-on

I have a minor but important step to add.

- from the azure portal, when the manifest for the application is changed to "SecurityGroup"

Modify "groupMembershipClaims": "NULL",  
To "groupMembershipClaims": "SecurityGroup",
Then, click on Save

After this is done, you will need to configure which and how the new claim-attribute is mapped from azure.

Again thanks - i have been trying to solve this for weeks now.

/Regards

Johannes