title: How to add additional Azure AD Attributes as Claims with Owin/Open ID Connect
body: <p>I would like to add additional Azure AD attributes as Claims to a ClaimsPrincipal created by the "out-of-the-box" ASP.NET MVC template (i.e. <code>app.UseOpenIdConnectAuthentication(...)</code>)</p>
  
  <p>I tried implementing something similar in the <code>SecurityTokenValidated</code> notification as shown in <a href="http://www.cloudidentity.com/blog/2015/08/26/augmenting-the-set-of-incoming-claims-with-the-openid-connect-and-oauth2-middleware-in-katana-3-x/" rel="nofollow">this article</a>, however it seems I'm running into a bit of a chicken-and-egg problem with my scenario:</p>
  
  <p>I need to call the Graph API to get the additional user attributes for the Claims, but I don't have the token yet (I don't think) at this point in the process to be able to call the API.</p>
  
  <p>Seems like I'm missing something obvious here.</p>