why Do not set acceptMappedClaims property to true for multi-tenant apps ?

[devna13]

Provide some explanation on why ?

"Do not set acceptMappedClaims property to true for multi-tenant apps, which can allow malicious actors to create claims-mapping policies for your app."

we are following custom claims and part of that we had to set acceptMappedClaims = true for multitenant apps.

https://learn.microsoft.com/en-us/azure/active-directory/develop/custom-extension-get-started?tabs=entra-admin-center%2Chttp#33-enable-your-app-for-a-claims-mapping-policy

{
  "acceptMappedClaims": true,
  "accessTokenAcceptedVersion": 2,
  "appId": "22222222-0000-0000-0000-000000000000",
}

need some guidance on how to move fwd with custom claims in this situation

---

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

• ID: 3f7ced07-0b71-715f-749b-180567591c72
• Version Independent ID: 8c533d7b-a058-3f1a-c296-9c0305f85f13
• Content: Understanding the Azure Active Directory app manifest - Microsoft Entra
• Content Source: articles/active-directory/develop/reference-app-manifest.md
• Service: active-directory
• Sub-service: develop
• GitHub Login: @rwike77
• Microsoft Alias: ryanwi

[SaibabaBalapur-MSFT]

@devna13 Thanks for your feedback! We will investigate and update as appropriate.

[ManoharLakkoju-MSFT]

@devna13 I'd recommend working closer with our support team via an [Azure support request] (https://docs.microsoft.com/en-us/azure/azure-portal/supportability/how-to-create-azure-support-request). Or you can leverage our Q&A forum by posting your issue there so our community, and MVPs can further assist you in troubleshooting this issue or finding potential workarounds.

[Teams Q&A forum] (https://docs.microsoft.com/en-us/answers/topics/46488/office-teams-windows-itpro.html) for technical questions about the configuration and administration of Microsoft Teams on Windows. [Microsoft Teams Community forum] (https://answers.microsoft.com/en-us/msteams/forum?sort=LastReplyDate&dir=Desc&tab=All&status=all&mod=&modAge=&advFil=&postedAfter=&postedBefore=&threadType=All&isFilterExpanded=false&page=1) Thank you for your time and patience throughout this issue.