Others

How to Modify a SAML Attribute in Microsoft Entra ID SSO

Natalie Taylor Oct 15, 2026 869 views

Question details

The user needs guidance on transforming or modifying an attribute in a SAML request or response after single sign-on authorization in Microsoft Entra ID.

How to Modify a SAML Attribute in Microsoft Entra ID SSO

Product: Microsoft Entra ID
Device & OS: not provided
Scenario: Configuring enterprise applications for SAML single sign-on and needing to adjust the format or content of the claims sent in the token.
Observed behavior: Seeking proper administrative steps or expert technical resources to successfully apply claims transformations for SAML attributes.

Before you start

Ensure you have Cloud Application Administrator or Global Administrator privileges in your Microsoft Entra ID portal before attempting to modify SAML configurations.

Solution 1Recommended

Configure SAML Claims Transformation in Microsoft Entra Admin Center

You can modify and transform SAML attributes directly within the Enterprise Applications settings of your Microsoft Entra ID environment.

Microsoft Entra ID allows administrators to manipulate the claims emitted in SAML tokens. This is useful when the relying party application expects an attribute (like a username or email) in a specific format that differs from the default Active Directory attribute.

Access Enterprise Applications

Sign in to the Microsoft Entra admin center. In the left-hand navigation pane, go to 'Identity', expand 'Applications', and select 'Enterprise applications'.

Select the Target Application

Search for and click on the specific application for which you want to modify the SAML attributes.

Open Single Sign-On Settings

In the application's left menu, select 'Single sign-on'. If SAML is already selected as the SSO method, you will see the configuration panels.

Edit Attributes & Claims

Locate the 'Attributes & Claims' section (usually step 2) and click the 'Edit' pencil icon in its upper-right corner.

Apply Claims Transformation

Click on the specific claim you wish to modify. Expand the 'Claim conditions' section, select 'Transformation' as the source, and use the transformation rules (like ExtractMailPrefix or Join) to format the attribute before saving.

Transformation Limitations: Some built-in attributes cannot be transformed or removed. Ensure you are applying transformations to custom claims or supported user attributes.

Solution 2

Consult the Microsoft Entra ID Q&A Community for Advanced Guidance

If your SAML claims transformation involves highly complex logic or federation issues, the official Microsoft community is the best place for specialized assistance.

Free Microsoft Office alternative

Streamline Your Enterprise Productivity with WPS Office

While managing complex identity federations and SAML SSO configurations in Microsoft Entra ID is crucial for IT, ensuring your team has a reliable and lightweight office suite is equally important for daily operations. WPS Office offers a powerful, free alternative to Microsoft Office that is easy to deploy and master.

1. Download the Installer: Visit the WPS Office website and download the free installation package for your operating system.
2. Install and Launch: Run the installer, follow the on-screen prompts, and launch the application.
3. Open Your Documents: Simply drag and drop your existing Microsoft Office files into WPS Office to continue working seamlessly.

Highly compatible with Microsoft Word, Excel, and PowerPoint formats to ensure seamless enterprise document sharing.Lightweight architecture ensures fast performance across all corporate workstations without heavy resource overhead.Familiar user interface reduces training time and guarantees a smooth migration for your organization.Provides robust PDF editing and conversion features in a single, unified productivity platform.

microsoft office alternative - wps office

Frequently Asked Questions

What is a SAML claims transformation in Microsoft Entra ID?

Claims transformation allows administrators to modify the data (such as email addresses, domain names, or user IDs) emitted in a SAML token. This ensures the data matches the exact format required by the third-party application receiving the SSO request.

Can I use regular expressions to transform SAML attributes in Entra ID?

Yes, Microsoft Entra ID supports using RegexReplace or RegexMatch within the claims transformation rules. This allows you to extract or format specific parts of a user attribute before it is sent in the SAML response.

Why are my modified SAML attributes not appearing in the SSO token?

This commonly happens if the target application's manifest does not accept the custom claim, if the transformation condition evaluates to false during the login process, or if the user profile is missing the necessary source attribute data.

Office Quick Solutions