none
How to access the Attributes tab in AzureAD?

    Question

  • Hi,

    I need to change some of the SAML user attributes that are passed to my application, however the Attributes tab isn't showing up.

    https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization

    What do I need to do, to get the Attributes tab?

    Note: I have two AzureAD subscriptions (in two different tenants), one is Premium, the other is "free" (to support an O365 subscription).  Neither are showing the Attributes tab.

    Thanks
    Craig

    Monday, March 27, 2017 12:56 AM

All replies

  • Hi Craig,

    The application you created did you select "application your organization is developing" if so then modification of the attributes isn't available for that application type.

    The ability to customize the claims sent in the SAML token is only available for Pre-Integrated Applications from the AD Application Gallery AND Custom Applications i.e. one that is not listed in the AD Application Gallery to which if this is one of your own applications your attempting t access then I believe you need to do the latter, and such documentation can be found here to do this: https://azure.microsoft.com/en-us/documentation/articles/active-directory-saas-custom-apps/

    Let me know If that helps,

    Regards,

    James.


    Senior Escalation Engineer EEE-Dev | Azure AD Serviceability | Identity Engineering Team | Azure AD Identity and Access Management | blog: http://aka.ms/edutech

    Monday, March 27, 2017 2:08 AM
  • Thanks for that James.

    That requires an AzureAD Premium license, I only have Free at the moment.  Do you know if that's Premium P1 or Premium P2?

    And to follow on, since it looks like I'm going to have to purchase AzureAD Premium subscriptions:

    I also have the odd situation where I only have two local (to the tenant) users and all other users are external.
    This page: https://azure.microsoft.com/en-us/pricing/details/active-directory/ suggests that I need a 1:5 ratio of Premium licenses per external user, for "paid Azure AD features".  Is this Attributes functionality considered a per-user paid feature, in which case I'd need 1:5 Premium subscriptions, depending on the number of external users I have?

    Thanks for responding so quickly.  The documentation is so vague about these things.

    Thanks
    Craig

    Monday, March 27, 2017 2:25 AM
  • Indeed it does so you will need to ensure you purchase seats for Azure AD Premium in order for this to appear. in fact you won't be able to add a custom application unless that subscription is present on the AAD where you want to create the application.

    I need to double check but to my knowledge this feature will be available if AAD P1 or P2 subscription is present on the directory service; I do not believe that it requires an AADP License to be assigned to a user accessing such application, but I need to just double check that as I question weather we don't enforce that feature working if said person is not assigned the license but we may still expect said number of seats to be purchased in order to be complying in accordance with the Licensing T&Cs

    AADP1 contains this feature to also answer your other question in there.

    Thanks,

    James.


    Senior Escalation Engineer EEE-Dev | Azure AD Serviceability | Identity Engineering Team | Azure AD Identity and Access Management | blog: http://aka.ms/edutech

    Monday, March 27, 2017 2:46 AM