Unclear how Groups Overage Indicator claim will change when Azure AD Graph API is replaced.

[nathan-j-nd]

The Groups Overage Indicator claim returns a Azure AD Graph API endpoint as follows:

<Attribute Name="http://schemas.microsoft.com/claims/groups.link">
<AttributeValue>https://graph.windows.net/{tenantID}/users/{userID}/getMemberObjects<AttributeValue>

There is a note about this claim as follows: "The Azure AD Graph API is being replaced by the Microsoft Graph API. To learn more about the equivalent endpoint, see user: getMemberObjects."

The application I develop currently supports this claim, but it is not clear what will change, if anything, related to the replacement of the Azure AD Graph API.

Will the value of this claim change at some point in the future to be a Microsoft Graph API endpoint, or will the value continue to be the Azure AD Graph API endpoint? Should I extract the relevant information (UserID) from the Azure AD Graph API endpoint in order to make the equivalent request to the Microsoft Graph API? If I do that I need assurance that the claim value/format will not change or I need to know what value/format to expect in the future.

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: ba7ec2a7-74f9-51c4-f85a-92a3503a3879
• Version Independent ID: 3ec36654-37e3-cf44-a018-46af09739fbd
• Content: SAML 2.0 token claims reference - Microsoft identity platform
• Content Source: articles/active-directory/develop/reference-saml-tokens.md
• Service: active-directory
• Sub-service: develop
• GitHub Login: @kenwith
• Microsoft Alias: kenwith

[AnuragSingh-MSFT]

@yaterchatter, thank you for the query. We will review it and get back to you.

[James-Hamil-MSFT]

Hi, we're still reviewing this!