Entra ID (Azure AD) Badge & PIN Attributes

Last Updated: April 07, 2026

This topic explains how to set up badge and PIN attributes for print release authentication for Entra ID (Azure AD).

Stored Attributes

If you use badges or PINs, the necessary attributes depend on how you store them:

  • PINs stored in an identity provider (IdP) require the following attributes:
    • authPinUser: The name the user enters to authenticate.
    • authPin: The PIN associated with the user to complete authentication.
  • PINs stored in the Vasion Print database require the following attribute: 
    • authPinUser: The name the user enters to authenticate.

    • Users self-register their PINs, so you do not need to add the authPin attribute.

  • Badges stored in an IdP require the following attribute:
    • badgeId: The badge information for the user.

    • The badge associates with the provisioned user, so you do not need to add the authPin or authPinUser attributes.

Map Attributes

Follow these steps:

  1. Sign in to the Entra ID (Azure AD) admin center at https://entra.microsoft.com.

  2. Select Enterprise apps from the left-side navigation, and then search for and select your app.

    Microsoft Entra admin center showing expanded Entra ID side navigation and "Enterprise apps" option.

  3. From the side navigation, select Provisioning.
  4. From the side navigation, select Attribute mapping (Preview).

  5. Select Provision Microsoft Entra ID Users.

    Microsoft Entra admin center showing "Attribute mapping (Preview)" option in side navigation.

  6. On the Attribute Mapping page, scroll to the bottom of the page, and select Add New Mapping.
  7. On the Edit Attribute page, do the following:

    1. Use the Source attribute menu to select the attribute you want to map.

      The source attribute is the field name with the value you want to provision over. For example attribute the userPrincipalName value to the authPinUser and the employeeId value to the authPin. After provisioning these values are the username and PIN used to sign in to the Control Panel Application (CPA).

    2. Use the Target attribute menu to select the custom attribute map destination, and select OK.

      Microsoft Entra admin center showing Edit Attribute page.

  8. For additional mappings repeat and select the source attribute you want to associate with the target attribute. For more details refer to the Microsoft's Editing the list of supporting attributes.
  9. After you finish creating the attributes, select Save and then Yes.

After you register a badge in Vasion Print, regardless of whether you use the Vasion Print database or an IdP, you cannot remove or disassociate the badge number from the user account in the Admin Console. Instead you must remove the user from Vasion Print, make the change to the badge, and then reprovision.

Next Steps

If you store badge or PIN information in Vasion Print, refer to the following: