OAuth2 return app_displayname in token claims

Question

question

CharlieHorton-0506 asked · Feb 26 at 01:53 PM

OAuth2 return app_displayname in token claims

Hi,

I am authenticating using an app in our Azure AD Tenant using the 'client_credentials' grant. I noticed that when I use the scope 'https://graph.microsoft.com/.default', my token claims include 'app_displayname', however, when I use a scope configured for one of our APIs I don't get that same claim, I still get the application ID through the claim 'azp', but I would like to also get the display name for the application?

Is it possible to configure this as a claim in the access token somehow?

Thanks

azure-active-directory azure-ad-graph azure-ad-authentication microsoft-graph-identity azure-ad-authentication-protocols

· 1

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Deva-MSFT · Feb 26 at 08:01 PM

Adding right tags/teams to assist

0 ·

Answer 1 · 2021-03-03T12:52:20.88Z

vipulsparsh-MSFT answered · Mar 03 at 12:52 PM

@CharlieHorton-0506 This is possible under the Microosft.graph namespace only cannot be used for any custom app. If you have a requirement for getting any custom property for users, groups, device organization or application you can use extension property resource type to achieve that.

For example, if an organization has a line of business (LOB) application that requires a Skype ID for each user in the directory, Microsoft Graph can be used to register a new property named skypeId on the directory’s User object, and then write a value to the new property for a specific user.

Read more here

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

· 1 ·

10 |1000 characters needed characters left characters exceeded

Attachments: Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

vipulsparsh-MSFT · Mar 04 at 04:48 AM

@CharlieHorton-0506 I wanted to follow up and know if the below responses helped in answering your query. If it did, please do not forget to accept the appropriate response as Answer.

0 ·

question