AAD SSO Match incoming mail/username to another mail attribute

[Christopher Capito]

Greetings,

I am currently working on a JIRA integration with Azure AAD. I have an issue with users from an external company (cross-tenant-collab) and provisioning / logging them into our JIRA.

The issue is as follows:

1. The user logs in via the "Microsoft" SSO. The authentication happens on their home tenant. They log in with a shorthand adress like "abc23@company.com" 

This means their username is "abc23@company.com" - However, they never use this mail anywhere, so I would need to provision them to JIRA with their long mail adress "firstname.lastname@subdomain.company.com"

However, when they log in and complete their company auth flow, it shows "logged in as abc23@company.com" , which of course means they can not access the page.

Is it possible to take this shorthand mail/username and replace the claim with the long mail attribute?