davidjrh/dnn.azureadprovider

Add a dropdown with the list of supported claims

davidjrh opened this issue · 1 comments

To help mapping claims to user properties or user profile properties, adding a dropdown with the list of supported claims for the current application would help.

The list of supported claims for an application can be obtained from:

  • v1.0 tokens: https://login.microsoftonline.com/{tenant}/.well-known/openid-configuration?appid={client-id}
  • v2.0 tokens: https://login.microsoftonline.com/{tenant}/v2.0/.well-known/openid-configuration?appid={client-id}

Plus the "core claim set" present in every token regardless of the policy. These claims are also considered restricted, and can't be modified. More info at https://docs.microsoft.com/en-us/azure/active-directory/develop/active-directory-claims-mapping

This would be excellent help in quick setup!

Even if it didn't have a dropdown listing the available claims, then perhaps a Help or Troubleshooting tab in the interface which listed these links (since all of the values are present in the configuration settings) which the admin could click to follow would be helpful.