AWS Cognito + Azure AD Integration

Detailed Requirement:
1. We are going to provide web based application to clients, consider our clients are colleges.
2. In our application we have signup and login page.
3. But few clients already have their AD, so they are not ready to create new user once again.
4. We are maintaining user management in Cognito - for our web application.
5. In our web application we have different role, based on role(authorization) we are showing corresponding web pages.
6. While integrating their AD in our Cognito pool, we will face attribute missing or mismatch

Here only I need your solution

7. In our web app, based on tenantid and role we are displaying the corresponding pages
8. But In their AD may not have above 2 fields(tenantid and role).
9. So before integrating their AD into our cognit we need to communicate colleges and ask to create role and tenantID based on webapp
10. If everything completed, if login success, we need to get JWT(it should contain role and teneantID)

My Expectation:
1. need detailed procedure to give hospital AD....what are all changes they need to do before integrate with our Cognito
2. Once login sucess, by default AD returns the token. that should be included role and tenantID

Solution:
Based on my findings, I think we can Use the Microsoft Graph API