...
We are going to add 3 SAML attributes
The first attribute is "IDPEmailUPN"
Map and map it to : userPrincipalName.userPrincipalName.
Set its Claim Type to http://schemas.xmlsoap.org/claims
The second attribute is "ImmutableID",
use script to map it to: userID.decodeHex().encodeBase64().toString()
Set its claim type to http://schemas.microsoft.com/LiveID/Federation/2008/05
The third attribute is "username" and map
Map it to: loginName.
For this attribute, select "URL Path" as the location and enable the "Get Input" option
Change NameIDFormat
...





