Conditional Access Location as SAML attribute assertion

%3CLINGO-SUB%20id%3D%22lingo-sub-2158547%22%20slang%3D%22en-US%22%3EConditional%20Access%20Location%20as%20SAML%20attribute%20assertion%3C%2FLINGO-SUB%3E%3CLINGO-BODY%20id%3D%22lingo-body-2158547%22%20slang%3D%22en-US%22%3E%3CP%3EHi%2C%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20am%20trying%20to%20utilise%20the%20Location%20that%20Conditional%20Access%20determines%20for%20a%20user%20authenticating%2C%20in%20an%20external%20application%20by%20sending%20the%20Location%20as%20a%20SAML%20attribute%20to%20the%20external%20application.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EIs%20this%20possible%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EI%20have%20not%20figured%20out%20how%20to%20map%20a%20Conditional%20Access%20attribute%20into%20a%20SAML%20attribute.%3C%2FP%3E%3CP%3EOr%2C%20if%20I%20create%20a%20Conditional%20Access%20Policy%2C%20can%20I%20assert%20as%20an%20SAML%20attribute%20whether%20that%20Policy%20fired%20or%20not%3F%20Or%2C%20which%20Policies%20did%20fire%3F%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3EAny%20other%20workaround.%3C%2FP%3E%3CP%3E%26nbsp%3B%3C%2FP%3E%3CP%3Echeers%2C%3CBR%20%2F%3EJon%20Estlander%3C%2FP%3E%3C%2FLINGO-BODY%3E%3CLINGO-LABS%20id%3D%22lingo-labs-2158547%22%20slang%3D%22en-US%22%3E%3CLINGO-LABEL%3EAzure%20AD%3C%2FLINGO-LABEL%3E%3C%2FLINGO-LABS%3E
New Contributor

Hi,

 

I am trying to utilise the Location that Conditional Access determines for a user authenticating, in an external application by sending the Location as a SAML attribute to the external application.

 

Is this possible?

 

I have not figured out how to map a Conditional Access attribute into a SAML attribute.

Or, if I create a Conditional Access Policy, can I assert as an SAML attribute whether that Policy fired or not? Or, which Policies did fire?

 

Any other workaround.

 

cheers,
Jon Estlander

1 Reply
Anybody?
Answering "this is not possible" would also be a good answer...