Forum Discussion

Zen_45's avatar
Zen_45
Copper Contributor
Dec 22, 2022

Add claim for personnal App registration

Hello,

 

I want to add the samaccountName in the token for an internal application.
Ideally, I would like to do the equivalent of this rule:

But if that's not possible, I'd like to have at least the samaccountName for the synchronized accounts.

Can you tell me how to do this ?

Thanks

1 Reply

  • Kidd_Ip's avatar
    Kidd_Ip
    MVP
    Dec 02, 2025

    It is possible to include the samAccountName attribute (or its Azure AD equivalent, onPremisesSamAccountName) in tokens issued for your internal application. However, this cannot be configured directly through the Token configuration blade in App Registrations. To achieve this, you must create a Claims Mapping Policy in Azure AD and assign it to the relevant application registration.

     

    Customize SAML token claims - Microsoft identity platform | Microsoft Learn

Resources