title: Azure Active Directory Integration with Custom RBAC
body: <p>We have our own web application which performs access control based on the username and associated roles defined locally and maintained in the local database</p>
  
  <p>I need to integrate our application with "Azure AD" to avail single sign-on (SSO) <strong>so that with the same user-name</strong>, we can integrate and access other SaaS applications as well.  I think I can achieve this with "Azure ADAL APIs" and "Graph APIs". </p>
  
  <p>However, I would like to understand how to define custom user attributes and roles for "Azure AD" to share the attributes and roles with our application upon authentication. This is required for our web application to provide Access Control ( based on user id and role) without defining roles locally. I am not sure how to achieve this?. </p>
  
  <p>Please let me know if it is feasible and what is the best option to achieve the same. </p>