- Under Permitted scopes, tick allatclaims, email, openid and profile. Scroll up in the list to find allatclaims.
- Select Next, then Next on the Summary page, then Close.
allatclaims lets AD FS put the user's details and groups in the ID token, which is where Mediaflow reads them.
Screenshot: Microsoft, CC BY 4.0, changed by Mediaflow.