Forum Discussion
Azure AD DS custom attributes sync
Hello everyone,
I make this post to ask if you know if there is the possibility to synchronize Azure AD custom attributes over to Azure AD Domain Services.
I could not find any documentation about this, plus I see inside Azure AD DS an OU named ADDSSyncCustomAttributes. Could it may be a reference for the question I am asking?
Thanks everyone!
5 Replies
- benmann
Microsoft
Please see the recent announcement of General Availabilty of synchronization for custom attributes in Entra Domain Services here: Create and manage custom attributes for Microsoft Entra Domain Services - Microsoft Entra ID | Microsoft Learn
Yes, you can synchronise custom attributes from AD to Azure AD via AAD Connect (up to a maximum of 100 attributes):
- Customize an installation of Azure Active Directory Connect - Microsoft Entra | Microsoft Learn
- Azure AD Connect sync: Directory extensions - Microsoft Entra | Microsoft Learn
Be careful with multi-valued attributes though, as while AAD Connect does indeed sync them correctly (and has done so for years) in their multi-valued form, Graph has only just recently started to surface them properly. If you're working with PowerShell modules, only the Microsoft.Graph.Users can handle them. Any single-valued custom attribute will be fine.
I'm unfamiliar with an organisational unit in Azure AD named ADDSSyncCustomAttributes, but my gut feeling is it relates more to the synchronisation process from Azure AD to the Azure AD DS managed domain, not the AAD Connect synchronisation process from on-premise AD to Azure AD (they're different things.)
If I were to really go out on the skinniest of limbs, I'd say it's more likely to be related to the new custom security attributes that are in preview, but perhaps someone more in the know can authoritatively answer this second question.
Cheers,
Lain
- Hello,
maybe my question was misunderstood because I was not referring at all to the sync process between AD and AAD. I was only referring of the one from AAD to Azure AD DS.
Anyways, it seems pretty clear that there is no answer to my question because I have already tried to research thoroughly but I have not seen anything relevant whatsoever.
Thanks anyways!My understanding is that only the listed attributes are synchronised in one direction from Azure AD to Azure AD DS:
Custom attributes, such as those from Azure directory or schema extensions are not included.
Cheers,
Lain
