How to show additional fields in the output json of /.auth/me endpoint in azure web app.

Amaaz Arshad 40

I want to add the "Company Name" field (as shown in the image) to the output of /.auth/me endpoint. How can I achieve this?

User's image

YutongTie-MSFT 53,731 Reputation points

2025-01-14T23:15:31.9533333+00:00

@Amaaz Arshad Thanks for reaching out to us! We are checking with our internal team and will get back to you as soon as possible.

Regards,

Yutong
Amaaz Arshad 40 Reputation points

2025-01-15T10:04:50.4933333+00:00

Hey @Raja Pothuraju , thanks for answer. I followed the steps mentioned and added the claim, but now when I opened incognito mode and logged in again in the application, it is giving me the following error:
**{"code":401,"message":"An error of type 'invalid_request' occurred during the login process: 'AADSTS50146: This application is required to be configured with an application-specific signing key. It is either not configured with one, or the key has expired or is not yet valid. Trace ID: 47f56d7b-14ed-4226-9a2c-30393beb0d00 Correlation ID: 594a2566-f888-477b-bef6-727a0056e45f Timestamp: 2025-01-15 09:50:08Z'"}
**
Raja Pothuraju 11,170 Reputation points Microsoft Vendor

2025-01-15T10:15:35.24+00:00
Hello @Amaaz Arshad,

Thank you for your response.

Based on the new error message, the issue can be resolved by setting "acceptMappedClaims" to "true" in the application's manifest within the App Registration.

To do this, follow these steps:

Navigate to Microsoft Entra ID.

Go to App Registrations and select the relevant app.

Open the Manifest and update the acceptMappedClaims property to true.

This should address the error. Please let me know if you need further assistance.

https://medium.com/the-new-control-plane/confusing-error-with-entra-id-enterprise-applications-fbe3b665a6c0

Thanks,
Raja Pothuraju.
Amaaz Arshad 40 Reputation points

2025-01-15T10:23:39.88+00:00

Hey @Raja Pothuraju, thanks alot, it worked. You are a life saver. Also, thanks a lot for the quick response :)
Raja Pothuraju 11,170 Reputation points Microsoft Vendor

2025-01-15T10:36:26.5533333+00:00

Hello @Amaaz Arshad,

Thank you for testing out and updating us here.

I have converted my solution into an Answer. I kindly request you to "Accept Answer" for the response below. This will help others in the community who are looking for similar solutions to find our discussion on the Q&A community forum.

Accepted answer

Raja Pothuraju 11,170 Reputation points Microsoft Vendor

2025-01-15T08:46:26.79+00:00
Hello @Amaaz Arshad,

Thank you for posting your query on Microsoft Q&A.

Based on your description, it seems you are looking to include the Company Name claim field in the /.auth/me endpoint within the token.

To add this claim to the token, you need to configure optional claims for the registered application in Entra ID. Please follow the steps below to pass the claim in the /.auth/me endpoint:

Navigate to Microsoft Entra ID > Enterprise Applications and search for the application linked to your web app in Azure App Service.

Open the application, then go to the Single Sign-On blade.

Click Edit under the Attributes & Claims section.

Click Add New Claim and, under Source Attribute, select User.CompanyName, then click Save.

This configuration will allow the Company Name attribute to be included in the token when a logged-in user requests it.

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.
Please sign in to rate this answer.

1 person found this answer helpful.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

How to show additional fields in the output json of /.auth/me endpoint in azure web app.

0 additional answers

Your answer