Azure - Small subpage to view claims

Universal Dashboard Cookbook
1

Here’s a small page for Azure SSO to view :

  • Your UPN
  • Your groups membership (ID)
  • Other claims

This can help you when designing your Authorization policies and having issues to confirm that the claim on which you base your authorization policy is indeed present.

Example policy
$AuthorizationPolicy = New-UDAuthorizationPolicy -Name “MyPolicy” -Endpoint {
param($User)

    $User.HasClaim("groups", "xxxx4b03-1xxx-4xxx-8x10-xxxxxxxxx2e")
}

2019-07-01%2015_13_50-Super%20dashboard
2019-07-01 15_13_50-Super dashboard.png919×747 21.1 KB

$AuthorizationPolicy = New-UDAuthorizationPolicy -Name “MyPolicy” -Endpoint {
param($User)

$User.HasClaim("groups", "xxxx4b03-1xxx-4xxx-8x10-xxxxxxxxx2e")

}
Code for the page shown above

 New-UDPage -Name 'Claims'  -AuthorizationPolicy 'Login'  -Endpoint {
    New-UDCard -Title 'UPN' -Text "$(($ClaimsPrinciple.claims | where type -eq "http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" ).Value)"
    New-UDCard -Title 'Groups' -Text "$(($ClaimsPrinciple.Claims  | where type -like "*groups" ).Value | Format-List | Out-String)"   
    New-UDCard -Title 'Claims' -Text "$($ClaimsPrinciple.Claims  | Format-List @{n='SName*';e={$_.Type.Split('/')[-1]}},Type,Value | Out-String)"   
}

PS: Don’t forget to set the following key / value in your app. manifest
"groupMembershipClaims": "SecurityGroup", if you don’t see your claims membership right way in the Azure Active Directory / App Registraion / Your app / Manifest blade.

3 Likes