How to add granular amr claims to your SAML apps in Entra ID
Check out this article via web browser: How to add granular amr claims to your SAML apps in Entra ID
In my last post, I covered how Entra ID now automatically sends the amr and acr claims for Salesforce, so its phishing-resistant MFA check finally has something to check. That part is automatic, no config needed. Every other SAML app doesn’t get that automatically. Per Microsoft’s own optional claims reference, the app administrator still has to add the optional amr claim, with the include_granular_amr additional…
The post How to add granular amr claims to your SAML apps in Entra ID appeared first on JanBakker.tech.
Published on:
Learn moreWe can help you with How to add granular amr claims to your SAML apps in Entra ID
If you want help implementing, troubleshooting, or improving this product, contact us and we’ll point you in the right direction.
Related posts
How to set up SMS or voice with your own telecom provider in Microsoft Entra
Bring your own SMS and voice provider to Microsoft Entra ID: setting up Soprano# Microsoft is retiring Microsoft-provided SMS and voice authen...
How to secure passkey registration in Entra ID
MC1450133 will have a big impact on Entra ID. I got several responses when I posted about it on LinkedIn. This change has two sides: It will...
Allow password change after secure sign-in
The use case# Passwordless sign-in doesn’t remove every need for a password. Some users primarily sign in without a password but still n...
A new workaround for authentication strength Conditional Access policy loops: Microsoft Authenticator Credential Registration service principal
Microsoft has added a new workaround for a specific Conditional Access loop that can stop users from registering a passkey in Microsoft Authen...
Optimizations for passkey registration experience you might have missed
In my earlier post about the passkey onboarding experience, I discussed MC1440968. That update has now rolled out, and the registration wiza...
Prevent users from creating new agent identity blueprints
Starting 4 November 2026, every user without an Entra role can create agent identity blueprints in your tenant, unless you turn it off first. ...
Cloud Sync provisioning agent fails to start with a gMSA
This is a knowledge base item. I hope it will help you someday. The issue# When installing an additional Microsoft Entra Cloud Sync provisioni...
From WordPress to Hugo on Cloudflare
janbakker.tech is now running on Cloudflare, and that was long overdue. When I started my blog in 2021, I picked what I knew at that time, and...
Where to store your Microsoft 365 passkey?
Check out this article via web browser: Where to store your Microsoft 365 passkey? Microsoft 365 (Entra ID) has supported passkeys for a long ...
Entra ID telephony providers for SMS and voice MFA: first look
Check out this article via web browser: Entra ID telephony providers for SMS and voice MFA: first look What was announced Microsoft has publis...