Skip to content

Commit 5389429

Browse files
Update active-directory-optional-claims.md
1 parent 723631d commit 5389429

File tree

1 file changed

+1
-4
lines changed

1 file changed

+1
-4
lines changed

articles/active-directory/develop/active-directory-optional-claims.md

Lines changed: 1 addition & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -234,14 +234,11 @@ Within the SAML tokens, these claims will be emitted with the following URI form
234234

235235
## Configuring groups optional claims
236236

237-
This section covers the configuration options under optional claims for changing the group attributes used in group claims from the default group objectID to attributes synced from on-premises Windows Active Directory. You can configure groups optional claims for your application through the UI or application manifest.
237+
This section covers the configuration options under optional claims for changing the group attributes used in group claims from the default group objectID to attributes synced from on-premises Windows Active Directory. You can configure groups optional claims for your application through the UI or application manifest. Group optional claims are only emitted in the JWT for **user principals**. **Service principals** _will not_ have group optional claims emitted in the JWT.
238238

239239
> [!IMPORTANT]
240240
> Azure AD limits the number of groups emitted in a token to 150 for SAML assertions and 200 for JWT, including nested groups. For more information on group limits and important caveats for group claims from on-premises attributes, see [Configure group claims for applications with Azure AD](../hybrid/how-to-connect-fed-group-claims.md).
241241

242-
> [!IMPORTANT]
243-
> Group optional claims are only emitted in the JWT for user principals. Service principals will not have group optional claims emitted in the JWT.
244-
245242
**Configuring groups optional claims through the UI:**
246243

247244
1. Sign in to the <a href="https://portal.azure.com/" target="_blank">Azure portal</a>.

0 commit comments

Comments
 (0)