From 7f13b446e4b6eeca380dcf8462d96877329ca186 Mon Sep 17 00:00:00 2001 From: Nathan Webster Date: Mon, 6 Apr 2020 18:23:49 +0100 Subject: [PATCH] Docs: Improve AzureAD documentation for allowed_groups (#23326) --- docs/sources/auth/azuread.md | 6 ++++++ 1 file changed, 6 insertions(+) diff --git a/docs/sources/auth/azuread.md b/docs/sources/auth/azuread.md index 0f2c8f5ba88..d9cc1426cad 100644 --- a/docs/sources/auth/azuread.md +++ b/docs/sources/auth/azuread.md @@ -122,6 +122,12 @@ only give access to members of the group `example` which has Id `8bab1c86-8fba-3 allowed_groups = 8bab1c86-8fba-33e5-2089-1d1c80ec267d ``` +You'll need to ensure that you've [enabled group attributes](https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-fed-group-claims#configure-the-azure-ad-application-registration-for-group-attributes) in your Azure AD Application Registration manifest file (Azure Portal -> Azure Active Directory -> Application Registrations -> Select Application -> Manifest) + +```json +"groupMembershipClaims": "ApplicationGroup" +``` + The `allowed_domains` option limits access to the users belonging to the specific domains. Domains should be separated by space or comma. ```ini