Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,367 questions
Send Attribute Name with multiple values
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(243.2, 65%, 33%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EB%3C/text%3E%3C/svg%3E)
BlackCat
86
Reputation points
With Azure AD, I am trying to send attribute name with claims conditional. I am using security grp "A" to assign value "Admin" and groupB for value "member". This is working OK but if user in both groupA and GroupB, I am only getting claim "member" in response. I know this is how Azure works but is there a way that I can send both value "admin" and "member" if user in both groups?
Thanks
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 57.00000000000001%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESS%3C/text%3E%3C/svg%3E)
Shashi Shailaj 7,596 Reputation points Microsoft Employee2020-08-28T16:42:31.08+00:00 Could you please provide a screenshot of how you have configured security group A to assign value admin? Is it some enterprise app present in gallery or its your custom app? Are you configuring claim conditions through Token Configuration blade of app registrations on portal, Enterprise app SAML SSO settings or you have used Set-AzureAdpolicy for token configuration? Please see the two screenshots and let us know as it would help us understand the query better.
Let us know and we will help you on this further.
Sign in to comment
Sign in to answer