Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Jump to bottom

[v15] docs: Fix username attribute transformation in Azure AD guide #47801

Merged
merged 2 commits into from
Oct 22, 2024
Merged

[v15] docs: Fix username attribute transformation in Azure AD guide #47801

Show file tree
Hide file tree
Changes from all commits
Commits
Show all changes
2 commits
Select commit Hold shift + click to select a range
78383e9
docs: Fix username attribute transformation in Azure AD guide
webvictim Oct 18, 2024
99223f5
Value -> Transformation
webvictim Oct 18, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
Binary file modified docs/img/azuread/azuread-8c-usernameclaim.png
View file
Open in desktop
Loading
Sorry, something went wrong. Reload?
Sorry, we cannot display this file.
Sorry, this file is invalid so it cannot be displayed.
10 changes: 7 additions & 3 deletions docs/pages/admin-guides/access-controls/sso/azuread.mdx
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -92,14 +92,18 @@ Before you get started, you’ll need:

![Put in Security group claim](../../../../img/azuread/azuread-8b-groupclaim.png)

1. Add a claim that transforms the format of the Azure AD username to lower case, in order to pass it to
Teleport. Set the Source to "Transformation". In the new panel:
1. (optional) Add a claim that transforms the format of the Azure AD username to lower case, in order to use it inside
Teleport roles as the `{{external.username}}` property.

Set the Source to "Transformation". In the new panel:

- Set the Transformation value to "Extract()"

- Set the Attribute name to `user.userprincipalname`.

- Set the Value to `ToLowercase()`.
- Set the Value to `@`.

- Click "Add Transformation" and set the Transformation to `ToLowercase()`.

![Add a transformed username](../../../../img/azuread/azuread-8c-usernameclaim.png)

Expand Down
Loading