Want to use an Azure AD attribute in Portal Contact for dynamically adding to Web Role

[Mdfaulkner]

The users that will be using our Power Portal have accounts in our internal Azure AD tenant and that is how they will authenticate to our Portal. When they login to the portal for the first time and creates the contact, we're looking to see if we can bring across an Azure AD attribute to write to that contact record. We can't use email because everyone has the same domain email. If we can get that extra attribute into the contact, we can use it to automatically assign a contact to a specific web role. We don't want to do this stuff manually. Any ideas on how or if there are other Azure AD attributes that can come across into the contact record?

Thanks!

[Fubar · Accepted solution]

Edit: also forgot, and possibly the easiest option, you could possibly add a claims mapping see this page   https://docs.microsoft.com/en-us/power-apps/maker/portals/configure/configure-openid-settings#config...

An External Identity record is created against the Contact record for each portal users External Identity Provider, this record contains an identifier for the respective AD User.

You should be able to use the identifier and the graph api to interact with AD to obtain the info you are after.

[Mdfaulkner]

Thanks Fubar, this is the route we're going to take. Appreciate your help