Forum Discussion

StefanKi's avatar
StefanKi
Iron Contributor
May 25, 2018

Sync Roles update fields in Azure AD

Hallo, i use active sync service to connect my on-premise AD with the azure AD. It works fine. Then I create an input sync role to set the azure ad field “usage location” depended on the country fie...
Access Management
Azure Active Directory (AAD)
Identity Management
Mitch King's avatar
Mitch King
Iron Contributor
May 29, 2018

Hi Stefan can you describe the exact steps you have taken so far to push this attribute to Azure AD? Be as specific as possible

  • StefanKi's avatar
    StefanKi
    Iron Contributor
    May 30, 2018

    Hi,

     

    here is description of the rule

     

    New-ADSyncRule `
    -Name 'usage location' `
    -Identifier '' `
    -Description '' `
    -Direction 'Inbound' `
    -Precedence 100 `
    -PrecedenceAfter '00000000-0000-0000-0000-000000000000' `
    -PrecedenceBefore '00000000-0000-0000-0000-000000000000' `
    -SourceObjectType 'user' `
    -TargetObjectType 'person' `
    -Connector '' `
    -LinkType 'Join' `
    -SoftDeleteExpiryInterval 0 `
    -ImmutableTag '' `
    -OutVariable syncRule


    Add-ADSyncAttributeFlowMapping `
    -SynchronizationRule $syncRule[0] `
    -Source @('c') `
    -Destination 'usageLocation' `
    -FlowType 'Expression' `
    -ValueMergeType 'Update' `
    -Expression 'IIF(IsNullOrEmpty([c],"DE",[c])' `
    -OutVariable syncRule

    • Mitch King's avatar
      Mitch King
      Iron Contributor
      May 30, 2018

      All looks good to me, except TO Azure AD should be "outbound" not inbound right?

       

      I must admit I have not created a rule with PS yet but I don't see how you have a source AND an expression, in the GUI the source IS the expression 

       

      i.e. displayname transformation source is below but you specify a source as 'c' as well as an expression, wondering how this looks in the source field for your rule?

       

      IIF(IsNullOrEmpty([displayName]),[cn],[displayName])

Resources