If the SAML request doesn't contain an element for NameIDPolicy, then the Microsoft identity platform issues the nameID with the format you specify. If the SAML request contains the element NameIDPolicy with a specific format, then the Microsoft identity platform honors the format in the request.
Optionally, you can specify the format that you want the nameID claim to have. Select the attribute or transformation that you want to apply to the attribute. To edit the nameID (name identifier value) claim: The application has been written to require a different set of claim URIs or claim values.The application requires the NameIdentifier or nameID claim to be something other than the username (or user principal name) stored in Azure AD.You might need to edit the claims issued in the SAML token for the following reasons: Then open the Attributes & Claims section. To view or edit the claims issued in the SAML token to the application, open the application in Azure portal. The SAML token also contains other claims that include the user's email address, first name, and last name. The user's unique ID is typically represented in the SAML Subject, which is also referred to as the name identifier ( nameID).īy default, the Microsoft identity platform issues a SAML token to an application that contains a NameIdentifier claim with a value of the user's username (also known as the user principal name) in Azure AD, which can uniquely identify the user. In a SAML token, claims data is typically contained in the SAML Attribute Statement. A claim is information that an identity provider states about a user inside the token they issue for that user. These SAML tokens contain pieces of information about the user known as claims. The application validates and uses the token to sign the user in instead of prompting for a username and password. When a user authenticates to an application through the Microsoft identity platform using the SAML 2.0 protocol, the Microsoft identity platform sends a token to the application. The Microsoft identity platform supports single sign-on (SSO) with most preintegrated applications in the Azure Active Directory (Azure AD) application gallery and custom applications.
0 kommentar(er)
