Forum Discussion

Pete_A's avatar
Pete_A
Icon for Altocumulus rankAltocumulus
Jul 24, 2025

SOLVED: sending IsCompliant, IsKnown and IsManaged via SAML (SSO)

Background We have an EntraID (Azure/Microsoft365) SAML based VPN using the APM module and were keen to provide a different device pool to domain devices, rather than personal devices (BYOD).  We no...
APM
saml
SAML IDP
SSO
sso apm
Pete_A's avatar
Pete_A
Icon for Altocumulus rankAltocumulus
Sep 04, 2025

Hi Injeyan_Kostas​ 

Sorry for the delay - didn't see the notification you'd commented and it's the summer holiday season.

That screen shot looks like it's from Azure - I couldn't find a way to get it to update through the GUI (see "to get working: azure steps") hence the manual coding of the manifest directly.

Hopefully the above makes sense!

All the best,


Pete

Injeyan_Kostas's avatar
Injeyan_Kostas
Icon for Nacreous rankNacreous
Sep 04, 2025

Hello,

Thanx for the reply.

I did configured it through manifest. But claims are not be sent and that's what I see in Azure GUI.

  • Pete_A's avatar
    Pete_A
    Icon for Altocumulus rankAltocumulus
    Sep 04, 2025

    Hi

    Looking at our set-up (under the application, the Enterprise App, configuration) I see:

    Did you want to check whether you're blocking "mapped claims", I have:

    	"api": {
		"acceptMappedClaims": null,