“On instances that use SAML single sign-on (SSO) authentication with the optional encrypted assertions feature, an attacker could forge a SAML response to provision and/or gain access to a user ...

Microsoft outlines how to create custom SSO claims in Entra ID using directory extension attributes for flexible identity ...