We have implemented federated authentication in Sitecore 9.3 version. We are able to authenticate with azure AD account successfully, But after authentication Sitecore role is not getting assigned to the logged in user.

We have given config settings as per the Sitecore documentation. The expectation is after successful login, the logged in user to be assigned with a Sitecore Role (admin/author role).

The procedure/settings we followed is –

  1. Created a App registration
  2. Updated the Manifest(changed groupmembershipclaims value to “SecurityGroup”
  3. Config entry of group object ID (the group object ID where ADuser is part of).

Kindly share your idea which can give a solution to the above problem. Let me know if you need any additional information.

  • There is probably something wrong with the configuration, so we might need to see that to help.
    – Gatogordo
    Jul 14, 2020 at 7:11

1 Answer 1


After doing couple of config changes and some other stuff, Finally adding a optional claim with the name "groups" solved the issue. After doing this change identity server is able to resolve the claims as per the transformation config settings. The reference to create optional claim is as per below blog. Please check this link

  • Hello, could you please let me know the exact steps you did to resolve this issue? I am also facing the same issue. Please elaborate your answer. At least provide the config you used for transformation.
    – NewbieHere
    Sep 13, 2021 at 5:58

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.