Are all SAML Attributes & Claims transformation methods supported through Claims Mapping Policy?

Hi Microsoft Team,

I am automating SAML application onboarding in Microsoft Entra ID using Microsoft Graph Claims Mapping Policy.

In the Entra admin center, under Enterprise Applications → SAML-based Sign-on → Attributes & Claims → Transformation, I can see the following transformation methods:

• Contains()
• EndWith()
• Extract()
• ExtractAlpha()
• ExtractMailPrefix()
• ExtractNumeric()
• IfEmpty()
• IfNotEmpty()
• Join()
• RegexReplace()
• StartWith()
• Substring()
• ToLowercase()
• ToUppercase()
• Trim()

However, the Microsoft Learn documentation for claims customization / claims transformations appears to document only a subset of these methods, such as:

• Join
• ExtractMailPrefix
• ToLowercase
• ToUppercase
• RegexReplace

The documentation also states that TransformationClaimType must match one of the expected inputs for the transformation method.

My question is:

Are all transformation methods exposed in the Entra admin center GUI also supported when creating a ClaimsMappingPolicy through Microsoft Graph/PowerShell?

Specifically, can the following GUI transformations be used in a ClaimsMappingPolicy?

Contains()

EndWith()

Extract()

ExtractAlpha()

ExtractNumeric()

IfEmpty()

IfNotEmpty()

StartWith()

Substring()

Trim()

If they are supported, could you please provide the Microsoft Graph ClaimsMappingPolicy JSON representation for each transformation, including:

1. TransformationMethod
2. Required InputClaims
3. Required TransformationClaimType values
4. Required InputParameters and their ID values
5. OutputClaims and their TransformationClaimType
6. Whether the transformation supports directory extension attributes as input

For example, for ToLowercase, I would like to confirm the expected Graph representation:

{

  "ID": "ToLowercase_Test",

  "TransformationMethod": "ToLowercase",

  "InputClaims": [

    {

      "ClaimTypeReferenceId": "mail",

      "TransformationClaimType": "sourceClaim"

    }

  ],

  "OutputClaims": [

    {

      "ClaimTypeReferenceId": "LowerMail",

      "TransformationClaimType": "outputClaim"

    }

  ]

}

I would also like to understand whether the GUI and Claims Mapping Policy use the same underlying transformation engine and transformation definitions, or whether some transformations are available only through the Entra admin center.

Thank you.

 

Hi Microsoft Team,

I am automating SAML application onboarding in Microsoft Entra ID using Microsoft Graph Claims Mapping Policy.

In the Entra admin center, under Enterprise Applications → SAML-based Sign-on → Attributes & Claims → Transformation, I can see the following transformation methods:

• Contains()
• EndWith()
• Extract()
• ExtractAlpha()
• ExtractMailPrefix()
• ExtractNumeric()
• IfEmpty()
• IfNotEmpty()
• Join()
• RegexReplace()
• StartWith()
• Substring()
• ToLowercase()
• ToUppercase()
• Trim()

However, the Microsoft Learn documentation for claims customization / claims transformations appears to document only a subset of these methods, such as:

• Join
• ExtractMailPrefix
• ToLowercase
• ToUppercase
• RegexReplace

The documentation also states that TransformationClaimType must match one of the expected inputs for the transformation method.

My question is:

Are all transformation methods exposed in the Entra admin center GUI also supported when creating a ClaimsMappingPolicy through Microsoft Graph/PowerShell?

Specifically, can the following GUI transformations be used in a ClaimsMappingPolicy?

Contains()

EndWith()

Extract()

ExtractAlpha()

ExtractNumeric()

IfEmpty()

IfNotEmpty()

StartWith()

Substring()

Trim()

If they are supported, could you please provide the Microsoft Graph ClaimsMappingPolicy JSON representation for each transformation, including:

1. TransformationMethod
2. Required InputClaims
3. Required TransformationClaimType values
4. Required InputParameters and their ID values
5. OutputClaims and their TransformationClaimType
6. Whether the transformation supports directory extension attributes as input

For example, for ToLowercase, I would like to confirm the expected Graph representation:

{

  "ID": "ToLowercase_Test",

  "TransformationMethod": "ToLowercase",

  "InputClaims": [

    {

      "ClaimTypeReferenceId": "mail",

      "TransformationClaimType": "sourceClaim"

    }

  ],

  "OutputClaims": [

    {

      "ClaimTypeReferenceId": "LowerMail",

      "TransformationClaimType": "outputClaim"

    }

  ]

}

I would also like to understand whether the GUI and Claims Mapping Policy use the same underlying transformation engine and transformation definitions, or whether some transformations are available only through the Entra admin center.

Thank you.

 

**Please note - I dont see anywhere in the docs that mentions - **"TransformationClaimType": "SourceClaim" for uppercase,lowercase and regex transformation method. This is I discovered during errors after doing the coding. Please confirm ""TransformationClaimType": "outputClaim"" is valid or not.