Forum Discussion

Pete_A's avatar
Pete_A
Icon for Altocumulus rankAltocumulus
Jul 24, 2025

SOLVED: sending IsCompliant, IsKnown and IsManaged via SAML (SSO)

Background We have an EntraID (Azure/Microsoft365) SAML based VPN using the APM module and were keen to provide a different device pool to domain devices, rather than personal devices (BYOD).  We no...
APM
saml
SAML IDP
SSO
sso apm
Injeyan_Kostas's avatar
Injeyan_Kostas
Icon for Nacreous rankNacreous
Jul 24, 2025

Hi Pete_A​ 
I just tried and got this error

Did you had the same and overcome it somehow?

  • Pete_A's avatar
    Pete_A
    Icon for Altocumulus rankAltocumulus
    Sep 04, 2025

    Hi Injeyan_Kostas​ 

    Sorry for the delay - didn't see the notification you'd commented and it's the summer holiday season.

    That screen shot looks like it's from Azure - I couldn't find a way to get it to update through the GUI (see "to get working: azure steps") hence the manual coding of the manifest directly.

    Hopefully the above makes sense!

    All the best,


    Pete

    • Injeyan_Kostas's avatar
      Injeyan_Kostas
      Icon for Nacreous rankNacreous
      Sep 04, 2025

      Hello,

      Thanx for the reply.

      I did configured it through manifest. But claims are not be sent and that's what I see in Azure GUI.

      • Pete_A's avatar
        Pete_A
        Icon for Altocumulus rankAltocumulus
        Sep 04, 2025

        Hi

        Looking at our set-up (under the application, the Enterprise App, configuration) I see:

        Did you want to check whether you're blocking "mapped claims", I have:

        	"api": {
		"acceptMappedClaims": null,