When SDS syncs with a student/teacher from PowerSchool to a user in AAD under the "sync existing users" setting, it uses identity matching the first time sync runs to match the source identity to the target identity. Once the initial match is made, SDS writes a “source anchor” attribute on the user object in AAD, which SDS will continue to use and keeps the account in sync from that point forward for the lifetime of the object. If a value on the object in the source directory (PowerSchool) is changed, that change will be synced and reflected on the user object in AAD the next time sync is run. SDS will not update any "AD only" attributes that may be synced from on-premise Active Directory like UPN, email address, first name, last name, etc. However, SDS will update EDU specific attributes as they change in PowerSchool- things like teacher/student number, grade, and Status.
Do you know which user attribute was changed in AAD?
Has sync run again between the time you posted this question and my (apologies) tardy response, and if so is the issue resolved?
Thanks,
Matt McGinnis
