Logo Questions Linux Laravel Mysql Ubuntu Git Menu
 

Azure ad group membership claims

I've set the groupMembershipClaims property in an app's manifest in Azure AD to "All", which should result in a user's security group memberships to be returned in the id token.

However, they are not being returned. Have tried to re-login multiple times. Is there something I am doing obviously wrong?

like image 934
juunas Avatar asked Oct 17 '16 13:10

juunas


People also ask

What are group claims?

A Group Claim is a lawsuit with many claimants. Claimants can be either companies or individuals. Most commonly a Group Claim will initially focus on one claimant whose circumstances are representative of the others, a type of test case.

What are azure ad claims?

Claims in Azure AD A claim is simply a piece of information, expressed as a key/value pair. For example, email = [email protected] . Claims have an issuer (in this case, Azure AD), which is the entity that authenticates the user and creates the claims. You trust the claims because you trust the issuer.

What is group membership in Azure AD?

What are Azure AD Security Groups? Azure AD Security Groups are analogous to Security Groups in on-prem Windows Active Directory. They are Security Principals, which means they can be used to secure objects in Azure AD. They can be created natively in Azure AD, or synced from Windows AD with Azure AD Connect.


1 Answers

Can you be more specific in terms of what exactly you are trying to achieve and how'd you want to do it.

Apparently, if the thing mentioned in your question is what exactly you are looking for and since the groupMembershipsClaims property is set to "All", you'll get the group claims in the JWT token.

You may want to read this article https://www.simple-talk.com/cloud/security-and-compliance/azure-active-directory-part-4-group-claims/ . This should help you resolve your issues.

Let me know in case you face this issue after you follow the procedure mentioned by the author.

like image 157
Narayana Erukulla Avatar answered Oct 25 '22 15:10

Narayana Erukulla