Adding Azure Ad Oauth2 JWT Token Claims

Question

I'm just wondering if there is a way to add or specify custom applications for the Azure Ad OAuth2 JWT token through the Azure Portal? Or is this just the possible side of the code?

Answer 1

As far as I know, Azure AD does not support issuing user requirements at this time.

As a workaround, we can use the Azure AD graph to add directory schema extensions . After that, we can use Azure AD Graph to get a data extension and add a custom ticket when the security token is checked as the code below:

app.UseOpenIdConnectAuthentication(
    new OpenIdConnectAuthenticationOptions
    {
        ClientId = clientId,
        Authority = authority,
        PostLogoutRedirectUri = postLogoutRedirectUri,
        Notifications = new OpenIdConnectAuthenticationNotifications
        {
            AuthenticationFailed = context => 
            {
                context.HandleResponse();
                context.Response.Redirect("/Error?message=" + context.Exception.Message);
                return Task.FromResult(0);
            }
            ,
            SecurityTokenValidated = context =>
            {
                //you can use the Azure AD Graph to read the custom data extension here and add it to the claims 
                context.AuthenticationTicket.Identity.AddClaim(new System.Security.Claims.Claim("AddByMe", "test"));
                return Task.FromResult(0);
            }
    });

, - Azure, .

Answer 2

, , (, ), -tenant - Azure AD Azure-AD. Azure-AD, .