Using Custom Attribute to deny users access to applications

Hello

i'm trying to deny some users access to a federated application based on custom attributes on their user account and i seem to be stuck. 

on the claim descriptions (ADFS)while trying to create a claim name,I don't know where to retrieve the information of the claim identifier. I have created a custom attribute on AD schema and mapped it to user account. Can anyone help with the steps?

I am using server 2012r2