Microsoft EAM Integration Kit
The Microsoft EAM Integration Kit processes the id_token_hint and claims parameters sent by Microsoft Entra ID’s external authentication mechanism (EAM).
It also sets acr and amr values for downstream adapters in the PingFederate authentication policy.
Typically, a downstream adapter like PingID uses these values to perform multi-factor authentication (MFA).
Components
- Microsoft EAM IdP Adapter
-
When PingFederate receives an OpenID Connect (OIDC) request from Microsoft Entra ID, the adapter validates the id_token_hint and extracts the
acrandamrvalues from the claims parameter. Additional claims can be exported out of the id_token_hint.
Intended audience
This document is intended for PingFederate administrators.
You can find help during the setup process in the following resources:
-
The following sections of the PingFederate documentation:
System requirements
-
PingFederate 11.3 or later.
-
A Microsoft Entra ID account with external authentication method enabled.