[v14] docs: Fix username attribute transformation in Azure AD guide (#…

…47800) * docs: Fix username attribute transformation in Azure AD guide * Value -> Transformation
gravitational · Oct 22, 2024 · 913f401 · 913f401
1 parent c0076f7
commit 913f401
Show file tree

Hide file tree

Showing 2 changed files with 7 additions and 3 deletions.
diff --git a/docs/img/azuread/azuread-8c-usernameclaim.png b/docs/img/azuread/azuread-8c-usernameclaim.png
diff --git a/docs/pages/admin-guides/access-controls/sso/azuread.mdx b/docs/pages/admin-guides/access-controls/sso/azuread.mdx
@@ -92,14 +92,18 @@ Before you get started, you’ll need:
 
    ![Put in Security group claim](../../../../img/azuread/azuread-8b-groupclaim.png)
 
-1. Add a claim that transforms the format of the Azure AD username to lower case, in order to pass it to
-   Teleport. Set the Source to "Transformation". In the new panel:
+1. (optional) Add a claim that transforms the format of the Azure AD username to lower case, in order to use it inside
+   Teleport roles as the `{{external.username}}` property.
+
+   Set the Source to "Transformation". In the new panel:
 
    - Set the Transformation value to "Extract()"
 
    - Set the Attribute name to `user.userprincipalname`.
 
-   - Set the Value to `ToLowercase()`.
+   - Set the Value to `@`.
+
+   - Click "Add Transformation" and set the Transformation to `ToLowercase()`.
 
      ![Add a transformed username](../../../../img/azuread/azuread-8c-usernameclaim.png)