Assigning emails to federated CMS users
Removed from your favourites
Assigning emails to federated CMS users
Created by r.bromley, last updated 10 Aug 2021
The following describes the order of precedence when assigning an email to a user after federated login, such as via AD FS or Azure AD.
AD FS
The value of the email claim is assigned.
Azure AD
WsFederation_Azure_PrioritiseUPNForEmailAddress = 0
- Use MicrosoftGraph.User.Mail value, if present.
- Use first of MicrosoftGraph.User.OtherMails addresses, if present.
- Use the UPN, if it is already in an email format.
- Use the username constructed from UPN, if present.
The constructed username will be in the form of an email address.
WsFederation_Azure_PrioritiseUPNForEmailAddress = 1
- Use the UPN, if it is already in an email format.
- Use 'email' claim, if present.
- Use MicrosoftGraph.User.Mail value, if present.
- Use first of MicrosoftGraph.User.OtherMails addresses, if present.
- Use the username constructed from UPN, if present.
The constructed username will be in the form of an email address.