Name: Configuring and Using Custom Claims in Microsoft Entra ID
Start: 2025-05-22T14:01:00Z
End: 2025-05-22T14:01:40.000Z
Location: BrightTALK

A leading identity security partner to public- and private-sector clients, MajorKey provides advisory, deployment & integration services, and managed operations across workforce, privileged, customer, and governance solutions for identity security. 

Our team of identity security experts produces webinars and podcasts a few times a month, covering industry news, opinions, and trending topics in the identity security space. We often partner with CyberArk, Microsoft, Ping Identity, SailPoint, & Saviynt. 


Identity programs are evolving fast—roles, access, and privilege are converging in ways that challenge even the most mature IGA models, while foundational challenges continue to test organizations. In this fireside chat, leaders from CyberArk and MajorKey explore the most common challenges organizations face when implementing IGA programs and share how automation, intelligence, and innovation are solving these complex problems more effectively. 

What you’ll learn: 
- The most common IGA challenges organizations continue to face across industries 
- Leveraging the modern IGA approach from MajorKey and CyberArk to align organizations for implementation of solutions that provide ZSP and JIT access to all identities within the environment
- How CyberArk and MajorKey are addressing these challenges through proven, real-world solutions and innovative approaches

From Complexity to Clarity: The Next Evolution of Identity Governance

As TLS certificate lifespans shrink to 47 days by 2029, identity teams face mounting pressure to automate. This session explores the intersection of Public Key Infrastructure (PKI) and Privileged Access Management (PAM)/Identity Access Management (IAM)—and how automation can deliver uninterrupted operations, compliance, and improved efficiency in mature environments. 

What you’ll learn: 
- Why 47 days? Understanding the new TLS certificate standard and its rationale. 
- Scope of impact: What is and isn’t affected by the change. 
- Implications for identity teams: How shortened lifespans reshape certificate management. 
- Automation strategies: Building resilience through automated certificate lifecycle management. 
- Integration approaches: Connecting PKI with PAM/IAM systems for seamless operations. 
- Operational & compliance benefits: Why automation matters for security and governance. 
- CAB Forum influence: How upcoming changes will affect your organization.

PKI Meets PAM: Automation Strategies for the New TLS Certificate Lifespan

Privileged Access Management (PAM) automation can unlock major efficiency and security gains, but timing and strategy are key. This session offers practical guidance on identifying automation opportunities, achieving quick wins, and building stakeholder support. 

What you’ll learn: 
- How to spot automation-ready PAM workflows. 
- When to initiate automation for maximum impact. 
- Quick wins that deliver measurable benefits. 
- Communicating automation value to stakeholders.

PAM Automation Playbook: Identifying Quick Wins and Strategic Gains

Is your identity program stuck in the past? Legacy IAM systems often act more like barriers than bridges to innovation—costly, complex, and ill-equipped for today’s security and compliance demands.  

Join MajorKey Field CISO Brandon Nolan for a dynamic session on how to break free from outdated identity tools and accelerate your journey to a modern, secure, and fully automated identity ecosystem. Discover how MajorKey's powerful solution, HorizonID, supercharges Microsoft Entra Suite to simplify identity workflows, strengthen governance, and ensure continuous compliance in a rapidly evolving regulatory landscape. 

In this session, you’ll learn:   
- How to overcome the most common identity roadblocks to modernization 
- How HorizonID enhances Microsoft Entra Suite to deliver smarter, faster identity management 
- How MajorKey’s Microsoft Entra Suite Workshop can jumpstart your transformation 

Whether you’re ready to migrate or just exploring your options, this session will give you the clarity and confidence to take the first step. 

Reserve your spot today and reimagine what’s possible with HorizonID and Microsoft Entra.

From Legacy to Legendary: Reinvent IAM with HorizonID & Microsoft Entra

If you’re like many of our clients who leverage SailPoint IdentityIQ, you’re curious about the value of migrating to Identity Security Cloud (ISC). As a SailPoint Admiral Partner, we’ve helped many of our clients migrate from IIQ to ISC.

Usually, the first question asked is, “Are we a good candidate for ISC?”

We answer this question and discuss the top reasons why organizations are choosing to migrate to ISC, best practices for migrating, and how you can utilize a migration to create immediate, impactful value for your organization.

What is covered in the webinar:

- What makes a company a good candidate for the migration
- Challenges you will face and what to expect/not to expect
- Best practices for migrating to ISC and process expectations
- How to create immediate business value
- What should one do after the migration
- Managing the changing landscape – both technical and compliance
- Ensuring interoperability with new systems and apps once on the platform

From SailPoint IdentityIQ to Identity Security Cloud (ISC): Creating Value in your IAM Program with Cloud

Learn methods for ensuring that you receive full value from your identity program while future-proofing your program against disruption from market changes.

Now more than ever, technology leaders are tasked with accomplishing more with less, and that’s especially true for identity programs. In today’s business climate of budget cuts, it’s vital to ensure that you are maximizing the value of your identity program while setting up the program to clearly showcase its value to company leadership.

What you’ll learn in this webinar:

- Five ways to drive more value out of your identity program
- The right approach to avoid pitfalls, achieve faster time to value and improve business performance around compliance
- Success metrics for your leadership team that will boost your budget
- How to future-proof your program in the overall ‘converged’ Identity market
- New challenges and disruptors to the Identity landscape
- Market outlook for Identity vendors and their solutions

Maximizing Value, Showcasing Success, and Future-Proofing Your Identity Program

As cloud environments continue to expand, Cloud Infrastructure Entitlement Management (CIEM) plays an increasingly vital role in maintaining least privilege through strong identity management and standardized security frameworks. This webinar will cover how CIEM helps establish least privilege across your cloud infrastructure. We’ll also dive into how CIEM provides deeper and centralized visibility of entitlements, helping lay the groundwork for posture management and DevSecOps.

What is covered:
- How CIEM helps establish least privilege across your cloud(s)
- Best practices for managing identities across multi-cloud environments with your IAM tool
- How to standardize your security frameworks based on your industry
- What NOT to do – what we’ve learned from our client experience
- How CIEM analytics can clean up and manage cloud entitlements
- How CIEM lays the groundwork for posture management

Control your Cloud: Mastering Least Privilege with Cloud Infrastructure Entitlement Management (CIEM)

Successful CIAM programs go beyond just providing ‘identity & access management for customers.’ They need to drive revenue generation through improved customer experiences, while helping to protect against identity theft and fraud.

In this on-demand webinar, you'll learn how organizations can best demonstrate and grow the ROI of CIAM programs. 

The webinar details:

- How to measure the success of a CIAM implementation
- Working across Marketing & IT teams to securely achieve ‘Digital Transformation’
- Real life examples of how CIAM programs create business value
- Leveraging analytics to improve the overall customer experience

How to Demonstrate Success and Grow the ROI of CIAM Programs

Learn how the Identity and Application Governance vendor landscape is evolving, strategies for managing the converging platforms, and more.

It’s no secret that the identity market is rapidly converging – just take a look at the recent Delinea/FastPath, SailPoint/ERP Maestro, and Netwrix/StrongPoint acquisitions.

As identity platforms expand into Application Governance, it is important for organizations to come together across traditionally siloed teams and optimize the platform across business services.

What's covered in this webinar:

- Evolution of the vendor landscape as Identity solutions converge with Application Governance
- Best practices for extending your Identity solution’s SoD framework to your ERP
- How SoDs are going beyond ERP and into the cloud with OT controls
- The inevitable- Role Remediation programs for your run-away ERP roles
- The convergence of Application Governance with Privileged Access Management

The Great Convergence: Bridging the Gap Between Identity and App Governance

The concept of privileged access used to pertain to Windows Server Admins and Linux Root user access – but in today’s business landscape, privileged access has extended to include sensitive & critical access to applications, on-premise and in the cloud.
Marketing users have access to sensitive CRM and client data. HR users have access to private health and financial information. The idea that only high-level admins are privileged is outdated – all access is privileged.

Privileged Access Management is evolving and must be at the foundation of your identity security program. PAM must be viewed more than a tool, but as the driver of modern identity programs. Let’s discuss how to grow beyond compliance and bring security to the forefront.

What's covered in this webinar:

- Which business assets need to be protected
- The risks associated with your assets being attacked
- How to begin protecting assets within your enterprise
- Who, internally, should own privileged access
- Best practices for operating a holistic PAM program - and where to begin
- The role of ITDR with PAM

All Access is Privileged – Taking a PAM-First Approach Towards your Identity Security Program

Join us on August 19th for an insightful roundtable webinar, as top CISOs from diverse industries tackle one of the fastest-growing threats to organizational security – non-human identities. 

As bots, service accounts, and IoT devices outnumber human users, many organizations are starting to pay more attention to the attack vectors lurking in plain sight. Non-human identities offer bad actors a path of least resistance, as they often go unmanaged, untracked, and unowned, amplifying the risk of breaches, operational disruption, and compliance challenges.

Our expert panel of CISOs will address critical questions including:
• What are the real issues in managing non-human identities?
• Why the increase of non-human identities could fuel the next major data breach
• How to build the business case for investing in robust identity management beyond humans
• The debate around integrating Operational Technology (OT) and Information Technology (IT)
• Strategies to balance customer trust, regulatory readiness, and the rapid adoption of AI-driven tools.

Don’t miss this opportunity to hear real-world lessons, strategic advice, and practical solutions for protecting your organization from the emerging risks associated with non-human identities.

Unmasking Invisible Threats: Securing Non-Human Identities

Identity security has evolved into a strategic enabler, empowering organizations to safeguard critical assets while unlocking new levels of operational efficiency, stakeholder trust, and organizational agility through intelligent automation. Forward-thinking enterprises are leveraging automated identity processes to streamline access, minimize risk, and accelerate digital transformation, positioning identity security as a driver of measurable business value and competitive advantage.

Join senior leaders and industry experts from ServiceNow, SailPoint, and MajorKey Technologies for an executive-level discussion on how integrating identity security with service management is transforming the enterprise landscape. Discover how leading organizations are breaking down silos between IT operations and security to build resilient, compliant, and responsive businesses.

Key executive takeaways include:

- Whether IAM is being reviewed as a business enabler
- Why identity is the new control plane for securing and enabling the modern enterprise
- How aligning identity governance and service management accelerates transformation and business agility
- The role of AI and automation in enabling smarter access, faster threat detection, and reduced manual effort
- Real-world examples of organizations reducing risk, improving compliance, and driving operational efficiency
- Proven strategies for fostering collaboration between CIOs, CISOs, and business leaders to maximize value

If you’re shaping your organization’s digital, security, or operations strategy, this session is essential. Discover how identity and service management, powered by automation and AI, can become a catalyst for enterprise-wide resilience, innovation, and results.

Powering business resilience through identity security and service management

Today’s organizations often rely on mature legacy identity governance platforms. Transitioning to a modern identity platform can be complex, requiring confidence, strategy, and the right tools.  

In this webinar, Field CISO Brandon Nolan will introduce Oxford Computer Group’s Identity Exchange (IdX), a powerful extension platform designed to address critical identity challenges to ensure a smooth migration.  

Built to enhance Microsoft Entra ID Governance, IdX simplifies the transition of your complex, custom line-of-business applications and integrations. It helps you fully unlock the value of your Microsoft Entra investment by resolving issues from legacy integrations, simplifying complex workflows, and reconciling conflicting data across sources. IdX  removes identity roadblocks every step of the way.  

Brandon covers: 

- The capabilities of IdX and how it extends the capabilities of Microsoft Entra 
- How IdX fits into your identity strategy 
- IdX client success stories with measurable results 

Discover how IdX can solve your toughest challenges and accelerate your path to a modern identity strategy.

Creating Transformative Identity Governance Solutions with Microsoft Entra Suite

Identity and Access Management has long been treated like insurance by the C-Suite – necessary, but uninspiring. Viewed as a cost of doing business, rather than way to transform your business.

By building an identity program around business outcomes instead of technology deliverables, you can start selling it to your leadership team. 

In this webinar we’ll show you can begin defining the business value of an IAM program so you can build leadership support, budget protection, and get the freedom to start executing.

What you'll learn:

• How to define the business value of IAM functions
• How to create common definitions in order to map business value across internal departments
• How to create champions for your IAM program
• Real examples of how IAM creates meaningful value for HR and marketing teams
• The growing role of AI in creating value from IAM

Who Gives a Sh*t About Identity Security – How to Create Business Value from IAM

Learn how Microsoft Entra Verified ID can provide continuous identity proofing for individuals interacting with your organization.

When dealing with hybrid work scenarios and large distributed organizations, confirming who you are engaging with becomes ever more critical. One way to ensure the identity and/or role of an individual is with the use of Verified IDs. These digital IDs can verify criteria such as employment, identity, or certifications.

In this webinar recording, we examine common use cases for Verified IDs, including improved proofing for onboarding, help-desk scenarios, and partner engagement.

Principal Architect Mark Riley also covers:

- Introduction to Microsoft Entra Verified ID
- What does proofing do? What doesn’t it do?
- Using Verified ID for various rules
- How does Verified ID improve your organization’s security?

Using Microsoft Entra Verified ID for Identity Proofing of Partners, Customers, and Employees

Azure AD Group Writeback is a feature we and our Microsoft Identity Manager (MIM) customers have been looking forward to implementing - and now it’s in public preview! Azure AD groups can now sync to on-premises Active Directory. Even better, if you are running an Azure AD Premium license (like most of our customers), you’ll be licensed to use it.

Adding group writeback to Azure AD Connect gets organizations a lot closer to eliminating the need for MIM, specifically the MIM Portal. Moving group management from MIM to the cloud will reduce processing time, reduce your on-premises footprint, and move your organization closer to a zero trust security architecture.

Implementing group writeback allows for Azure AD and AD security groups to be managed in one location. Additionally, using Azure Identity Governance can improve security by providing attestation of on-premises AD security groups.

Presented by Architect Nathan Mertz, this webinar covers how to move your MIM group functionality to Azure AD, while at the same time improving support for organizational compliance and reporting. Nathan covers:

- Group management
- Group approvals/workflows
- Dynamic/criteria groups
- Group entitlement management
- Attestation (including for AD groups on-premises) and access requests

Moving MIM Group Functionality to Azure AD for On-Premises Group Attestation

Strengthen security while streamlining IT operations and reducing costs.

Many organizations using Microsoft 365 (M365) productivity tools (formerly the Office 365 suite of products) are under-utilizing the full breadth of functionality provided by the Microsoft 365 E3/E5 licenses. That can lead to higher costs, and potentially leaves the door open for security breaches.

We see underutilized M365 licenses in almost all of our engagements, and we regularly see unnecessary money being spent on third party tools when M365 could be doing the job.

Ask yourself –

- Are you leveraging Azure AD as your centralized identity provider, providing single sign-on for SaaS (Software as a Service) applications, and taking advantage of the hybrid solutions for on-premises applications?
- Is your HR-driven identity lifecycle management using third-party solutions (potentially costing thousands of dollars in renewals) for identity provisioning/deprovisioning instead of leveraging the native capabilities available with Microsoft Entra Azure AD?
- Could your existing identity governance (IGA) use cases, such as attestation, be addressed by Microsoft Entra?

Any “yeses” to these questions? In this webinar recording Principal Architect Frank Urena shows how the Microsoft Entra suite of identity and security solutions can help you reduce your licensing costs, simplify IT operations, and strengthen your cloud security posture.

How to Get the Most Out of Your Microsoft 365 Investments

Microsoft Entra ID (formerly Azure AD) now makes it easier to configure custom claims for applications to trust it for authentication and authorization.

Custom claims, or optional claims, are typically needed to provide additional information in Access Tokens to assist the receiving API in authorizing access to resource data. Custom claims in ID Tokens can be used by an application to provide custom experiences based on these claims.

Role or Group claims are typically used to provide conditional access to resource data, but third-party applications may require additional data that is not included in these claims. For example, an application may require department or division information to assist in determining what data to expose. Using custom claims, this information can be readily obtained from existing directory information. 

In this technical webinar, Principal Consultant Randy Robb covers Microsoft Entra's new application configuration blade for utilizing custom attributes, and how this can be utilized to provide custom claims in SAML, ID, and access tokens. He also demos examples of custom claims in returned tokens and how to utilize them.

Configuring and Using Custom Claims in Microsoft Entra ID

Microsoft Entra ID

Entra ID Custom Claims

Azure AD Custom Claims

Optional Claims

Secure Authentication

Modern Authentication

The IT security community on BrightTALK is composed of more than 200,000 IT security professionals trading relevant information on software assurance, network security and mobile security. Join the conversation by watching on-demand and live information security webinars and asking questions of experts and industry leaders.

IT Security

As an IT professional, many of the problems you face are multifaceted, complex and don’t lend themselves to simple solutions. The information technology community features useful and free information technology resources. Join to browse thousands of videos and webinars on ITIL best practices, IT security strategy and more presented by leading CTOs, CIOs and other technology experts.

Configuring and Using Custom Claims in Microsoft Entra ID

Presented by

About this talk

MajorKey Technologies