Category Archives: EntraID

How to get SAML payload decoded using PowerShell and browser developer tools?

Posted on June 3, 2024 by Pankaj

Summary This article is to show how to decode the Single Sign-on SAML payload in Microsoft Entra. Solution Follow the following links to create an Enterprise Applications in Entra. ClaimsXRay in AzureAD with Directory Extension Look for the SAML Payload … Continue reading →

Posted in Azure, EntraID, powershell | Leave a comment

How to add domain/samaccountname claim attribute in Entra Application?

Posted on May 6, 2024 by Pankaj

Summary The customer’s app required an UPN claim in the format of domain/samaccountname. Usually the UserPrincipal attribute is an email address. The customer has the hybrid identity and Active Directory is synched. The following technique can give you the domain/samaccountname … Continue reading →

Posted in Azure, EntraID | Leave a comment

What are the benefits to explain “Assignment required?” and “Visible to users?” flags to the customer?

Posted on April 18, 2024 by Pankaj

Summary To transition ADFS application to Entra ID you are creating the Enterprise application. You will notice two flags, “Assignment required?” and “Visible to users?”. If you hover over the text it clearly states that if this flag is set … Continue reading →

Posted in Azure, EntraID | Leave a comment

How to map ADFS roles claim rule to Entra ID application? 

Posted on April 3, 2024 by Pankaj

Summary  The following is a ADFS claim for the FooBar client’s application.    @RuleTemplate = “LdapClaims” @RuleName = “AD Attributes”  c:[Type == “http://schemas.microsoft.com/ws/2008/06/identity/claims/windowsaccountname”, Issuer == “AD AUTHORITY”] =>   issue( store = “Active Directory”,   types = (  “http://schemas.xmlsoap.org/ws/2005/05/identity/claims/nameidentifier”,   “user.firstName”,  “user.lastName”), query = “;sAMAccountName,givenName,sn;{0}”, param = c.Value);  @RuleTemplate = “EmitGroupClaims” … Continue reading →

Posted in EntraID | Tagged , , , , | Leave a comment