// Module included in the following assemblies:
//
// * cloud_experts_tutorials/cloud-experts-entra-id-idp.adoc

:_mod-docs-content-type: PROCEDURE
[id="cloud-experts-entra-id-idp-configure-group-claims_{context}"]
= Configure group claims

[role="_abstract"]
Configure group claims in Entra ID to allow {product-title} to manage user group memberships and enable group-based role bindings in the cluster.

[NOTE]
====
Configuring group claims is an optional step.
====

.Procedure
. From the *Token configuration* sub-blade, click *Add groups claim*.
+
image:azure-portal_optional-group-claims-page.png[Azure Portal - Add Groups Claim Page]

. To configure group claims for your Entra ID application, select *Security groups* and then click *Add*.
+
[NOTE]
====
In this example, the group claim includes all of the security groups that a user is a member of. In a real production environment, ensure that the group claim only includes groups that apply to {product-title}.
====
+
image:azure-portal_edit-group-claims-page.png[Azure Portal - Edit Groups Claim Page]