Some applications expect to receive a user’s group membership information as claims in the token. By configuring Azure AD to emit the same group details in claims as the application previously received from legacy on-premises Active Directory, you can move the application to work directly with Azure AD and take advantage of the identity-based security capabilities that Azure AD offers and migrate from AD FS.
Read the tech community blog to learn more.