You are building a web application that uses the Microsoft identity platform for user authentication. You are implementing user identification for the web application. You need to retrieve a claim to

The correct answer is A. oid. oid - The object identifier for the user in Azure AD. This value is the immutable and non-reusable identifier of the user. Use this value, not email, as a unique identifier for users; email addresses can change. If you use the Azure AD Graph API in your app, object ID is that val

Submitted by mike_84· Mar 30, 2026Implement Azure security

Question

You are building a web application that uses the Microsoft identity platform for user authentication. You are implementing user identification for the web application. You need to retrieve a claim to uniquely identify a user. Which claim type should you use?

Options

Aoid
Baud
Cidp
Dnonce

How the community answered

(30 responses)

A
73% (22)
B
10% (3)
C
13% (4)
D
3% (1)

Explanation

oid - The object identifier for the user in Azure AD. This value is the immutable and non-reusable identifier of the user. Use this value, not email, as a unique identifier for users; email addresses can change. If you use the Azure AD Graph API in your app, object ID is that value used to query profile information. Not B: aud - Who the token was issued for. This will be the application's client ID. https://docs.microsoft.com/en-us/azure/architecture/multitenant-identity/claims

Topics

#Microsoft identity platform#JWT claims#oid claim#user authentication

Community Discussion

No community discussion yet for this question.

Full AZ-204 Practice