Skip to main content
Skip table of contents

Map extensionAttribute via Custom Claims Mapping policies

Some organisations make use of the extensionAttrbutes in Active Directory.

image-20240523-224639.png

In order to make use of these attributes in EzeScan WebApps there is some configuration that must be completed.

Sync the attributes to Azure AD

  1. In Microsoft Azure Active Directory Connect select the “Customize synchronization options” option.

    image-20240523-235252.png
  2. In the Optional Features section ensure you have enabled “Directory extension attribute sync”.

    image-20240524-000126.png
  3. On the Directory Extensions screen select the attributes you wish to sync.

    image-20240524-000336.png
  4. Save this setting and then on the next sync interval the attributes should be synced to Azure AD.

Configure a Custom Claims Mapping policy

  1. Open the existing app registration and then click the link next to the “Managed application in local directory” option.

    image-20241009-043801.png
  2. This will take you to the Enterprise Application for the App Registration.
    Select the Manage > Single sign-on option on the left menu.

    image-20241009-042426.png
  3. Click on the Edit button in the Attribute & Claims area.

    image-20241009-042539.png
  4. Click the Add new claim button

    image-20241009-042638.png
  5. Enter a name for the claim when it is sent to the application. eg extensionAttribute1
    Select the appropriate source attribute from the dropdown list. eg user.extensionattribute1
    Then click the Save button.

    image-20241009-043005.png

Repeat this step for any additional claims you wish to map. eg “title”, “department” etc

  1. Confirm all of your required mappings are now visible.

    image-20241009-043142.png

  2. Navigate back to your App Registration and select the Manage > Manifest option on the left menu.

    image-20241009-043543.png
  3. Find the line that says "acceptMappedClaims": null, and change to "acceptMappedClaims": true,
    Click the Save button.

    image-20241009-043947.png

Test the Claim Mapping Policy

  1. Log into EzeScan WebApps using Azure AD
    In the top right corner click the users display name and select Settings.

    image-20240523-234909.png
  2. Click on the Claims tab and then look for the newly configured claim

    image-20240523-234804.png

JavaScript errors detected

Please note, these errors can depend on your browser setup.

If this problem persists, please contact our support.