Azure AD requires one claim only, the user's account name. It requires that the user's account name is returned in the NameID in the format of Down-Level Logon Name.
https://docs.microsoft.com/en-us/windows/win32/secauthn/user-name-formats
Overview
Content Tools