获取用户时获取用户组 [英] Getting users groups when getting a user

问题描述

我正在尝试建立一个网站，并在其中运行用户必须使用Azure AD帐户登录的网站.用户本身通常是两个组之一的成员.在Azure AD中是否有任何方法可以获取该组ID和/或名称作为对身份令牌的声明返回?

I'm trying to get a website up and running where the user has to log in using an Azure AD account. The user themselves are usually either a member of one of two groups. Is there any way within Azure AD of getting that group ID and/or name returned as a claim on the identity token?

推荐答案

您可以编辑应用程序的清单.

You can edit the manifest of the app.

您可以通过Azure Active Directory->应用程序注册->您的应用程序->清单在新门户中找到它.

You can find it in the new portal via Azure Active Directory -> App Registrations -> Your app -> Manifest.

然后，您需要将groupMembershipClaims属性设置为"SecurityGroup"或"All".

Then you need to set the groupMembershipClaims property to either "SecurityGroup" or "All".

"groupMembershipClaims": "SecurityGroup"

然后，这些ID将以ID令牌的形式返回给您的应用. SecurityGroup仅包括AAD安全组，全部还包括Office 365组.

The ids will then be returned in id tokens for your app. SecurityGroup only includes AAD security groups, All also includes Office 365 groups.

这篇关于获取用户时获取用户组的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！