This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(163.2, 36%, 25%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EA9%3C/text%3E%3C/svg%3E)
After assigning custom security attribute to the user/service principal object. Is it possible to include that attribute in SAML request while configuring AWS Single Sign On with SAML.
Unfortunately, this is not currently possible. You can refer to this official documentation article if you need confirmation: https://learn.microsoft.com/en-us/entra/fundamentals/custom-security-attributes-overview#what-can-i-do-with-custom-security-attributes
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(0, 17%, 10%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EVJ%3C/text%3E%3C/svg%3E)
Hello AzureUser-9588,
As the description, we understand that you want to pass 'custom security attributes' to SAML applications.
As Vasil Michev mentioned it is not possible for SAML applications, but if you use Open ID/Oauth protocol, you can make use of extension properties as optional claim in Microsoft Entra ID application instead of custom security attributes as workaround.
I request you to provide valuable feedback on this issue at the link provided below.
https://feedback.azure.com/d365community/idea/9aa652fc-f983-ec11-a81b-0022484bfd94