0
votes

I have an Azure AD Tenant that is federated with ADFS. ADFS has an attribute called "employeeNumber".

When a user authenticates against AAD for accessing our custom Web API, i would like the jwt provided by AAD to contain the claim "employeeNumber". Once the user is authenticated against the custom Web API, the code must check the presence of this claim and its related value.

I've found some tutorials for doing something like this but they refers to SaaS applications. Attribute sync tutorial

Custom applications registered in AAD don't have the option "provisioning" that the above link refers to.

Thank you.

1

1 Answers

1
votes

Are you using AAD Connect?

That needs to be configured to pass the attribute.

Then you need to tell Azure AD to pass the attribute by modifying the manifest.