Issue to add custom claim "samaccountname" into azure ad - azure

Question

I need to add the custom claim "samAccountName" to be shown in a token (using jwt)
First, I created the powershellscript
New-AzureADPolicy -Definition #('{
"ClaimsMappingPolicy": {
"Version": 1,
"IncludeBasicClaimSet": "true",
"ClaimsSchema":[{
"Source": "user",
"ID": "onpremisessamaccountname",
"SamlClaimType": "samaccountname",
"JwtClaimType": "samAccountName"
},
]
}
}') -DisplayName "att_ext_samaccountname_even2_prod" -Type "ClaimsMappingPolicy"
I assined the new policy to my objectid and its seems to be ok
In azure manifest I put "acceptMappedClaims": true and it looks like this
but in "Token confguration -> Optional claims" it looks like this (warning sign)
And I cannot find the claim to be added when select "add optional claim"
any thoughts of what I'm doing wrong of what is missing?
thanks in advance

Answer 1

I tried to reproduce the same in my environment and got the below results:
I modified acceptedMappedClaims to true and added the extension in app manifest like below:
And got the same error as below:
Alternatively, I used below PowerShell commands to add samaccountname extension in token like below:
$MyApp = (New-AzureADApplication -DisplayName "AppName").ObjectId
New-AzureADServicePrincipal -AppId (Get-AzureADApplication -SearchString "AppName").AppId
New-AzureADApplicationExtensionProperty -ObjectId $MyApp -Name "samaccountname" -DataType "String" -TargetObjects "User"
Set-AzureADUserExtension -ObjectId ServicePrincipalObjectId -ExtensionName "extension_XXXX_samaccountname" -ExtensionValue "Value"
After executing the above commands, I got the response like below:
I was able to add the samaccountname as an optional claim in the Azure Portal like below:
After decoding the token (generated using auth code) flow got samaccountname successfully like below:
For more in detail, please refer below links:
Azure AD cmdlets to work with extension attributes | Microsoft Docs
Inlcude onpemise samaccount in azure ad claims by soumi-MSFT