Forum Discussion

Thomas Habersatter's avatar
Thomas Habersatter
Copper Contributor
May 15, 2017

Azure AD B2B SharePoint on Premise using Groups

Having SharePoint OnPrem, ADFS, Azure AD Sync etc in place and wanting to use Azure AD B2B for external user access the authentication of external users in the SharePoint Web Application is now possi...
Azure AD B2B
  • Thomas Habersatter's avatar
    Thomas Habersatter
    Jun 07, 2017

    Now Azure AD Groups are transmitted as Roles-Claim to SharePoint. The only thing we changed was the AzureCP configuration (Claims Provider) by removing the UPN Claim, so that only EmailAddress and Role is used as Claim types mapped to Azure objects.

null null's avatar
null null
Copper Contributor

Hi

I don't know how you solved this but I'm using accounts defined in AzureAD (members and B2B guests), putting them in Azure groups (usage of AzureCP to see them in People Picker). The "Role" claim with the Azure group will appear in the claims associated to the user for Azure AD members and Azure AD Guest but only when defined as Microsoft Account (= source). When the source is "Azure AD External", it won't appear. Any idea ?

Resources