This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(192, 65%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EJG%3C/text%3E%3C/svg%3E)
HI
I want to include additional directory claims in the ID token of my Entra External ID instance.
I have followed the instructions here:
https://learn.microsoft.com/en-us/entra/external-id/customers/how-to-add-attributes-to-token
I have added the claims for the app registration in the portal (as can be seen below), but they don't show up in the application's ID token when logging in. I don't get any error messages. How can I start troubleshooting this?Best regards, Johan
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(278.4, 45%, 36%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAV%3C/text%3E%3C/svg%3E)
Thank you for post!
May I know have you Update the application manifest to accept mapped claims
Hi @Johan Gustafsson
We haven’t heard from you on the last response and was just checking back to see if you have a resolution yet. In case if you have any resolution please do share that same with the community as it can be helpful to others. Otherwise, will respond with more details and we will try to help.
Hi Akhilesh!
Sorry for the late reply, but yes, I have edited the manifest. I only found both the mentioned keys under the "AAD Graph App Manifest (Deprecating Soon)"-tab:
{
"id": "xxxxxxxx-e4fc-4a3d-ba40-a5f9b947d512",
"acceptMappedClaims": true,
"accessTokenAcceptedVersion": 2,
"addIns": [],
"allowPublicClient": true,
...
}
How would I edit them under the "Microsoft Graph App Manifest (New)"-tab
Anything else I can check?
Best regards,
Johan
Unfortunately, I have not been able to solve this issue yet @Akhilesh Vallamkonda I tried creating new app registrations and followed the link below closely. I have no idea how to troubleshoot this. Any ideas on how to proceed?
Hmm, it seems like I finally got it to work now. Not sure what the issue was. But it could be good to update the instructions to match https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation
I'm glad that you were able to resolve your issue and thank you for posting your solution so that others experiencing the same thing can easily reference this! Since the Microsoft Q&A community has a policy that "The question author cannot accept their own answer. They can only accept answers by others ", I'll repost your solution in case you'd like to "Accept " the answer.
Issue:
you want to include additional directory claims in the ID token of my Entra External ID instance.
Solution:
your issue is fixed by following the instructions as per document. https://learn.microsoft.com/en-us/entra/identity-platform/azure-active-directory-graph-app-manifest-deprecation
If you have any other questions or are still running into more issues, please let me know.
Thank you again for your time and patience throughout this issue.
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.