属性映射SAML令牌Azure Active Directory

Question

We have an Enterprise Application configurated at Azure Active Directory. In the SAML token we supply the external application with information about the user that is logged in.

The list of properties is quite extensive but in this list we miss the property "user.mobile". Is this correct and how can we add this correctly[ in the SAML token.

] 1

Answer 1

It seems that you cannot include user's mobile number in a claim. Neither through customizing SAML token for enterprise applications , nor via claims mapping policies (preview) .

So, the only last resort is using Microsoft Graph . If your application needs the user mobile phone it can either ask the user or query the Microsoft Graph .