Add employeeId to binding_username_claim list

[ffdarkpenguin]

In out company we use employeeID as moodle username. But its not available for selection in the Binding Username Claim page.

While talking to @weilai-irl in the #2550 issue I was requested to open this feature request.

Responding to the questions he asked in our last conversation:

Yes, the employeeId field is already available for mapping.

The print bellow shows its not one of the available user ID tokens available:

We are using Microsoft Entra ID as IdP.

We are syncing users and it's very important for us.

We don't create users on sync, only update existing ones.

We check the option on update to match UPN with moodle emails not moodle username.
During the sinc we see the record match but no update is done since it can't change de username. Here I expected it to update the other fields and leave username as is but no.
For testing porpoise we are using UPN as binding_username_claim for now until we can use employeeId if possible.

Thanks for all assistance @weilai-irl

[weilai-irl]

Hi @ffdarkpenguin

Thank you for creating the request.

Before any work can start in this one, I'd like to ask a question that was mentioned in my original note at #2550 (comment) again - could you confirm if the employeeID field is available in the claims of either access token or ID token please? I don't see it in the specification of either:

• ID token: https://learn.microsoft.com/en-us/entra/identity-platform/id-token-claims-reference
• Access token: https://learn.microsoft.com/en-us/entra/identity-platform/access-token-claims-reference

In order for a field to be able to be used as the bind username claim on a site with user sync enabled, the field needs to present in both token claims and in the List users Graph API.

Regards,
Lai