locked
Configuration required in DirSync tool to synchronize Extension Attributes from On-prem AD to Schema Extensions in Azure AD RRS feed

Answers

  • There are two types of "extension attributes", so let me discuss both and one of the answers will be relevant to what you are looking for.

    There are attributes named msExchExtensionCustomAttributeX and these come with the Exchange schema. These attributes are sync'ed from on-prem to Azure AD and prepared for use with Exchange Online. However, the Exchange Online interface does not today allow you to select these attributes. These attributes are not visible through Graph (other Exchange attributes are not visible through Graph either). These have very limited use today.

    We also have the feature named Directory Extensions (https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-get-started-custom/#directory-extension-attribute-sync) which will allow you to pick any on-prem attribute, including custom attributes, and extend the Azure AD schema. These attributes are not visible to Exchange Online but can be accessed through Graph. This feature will require Azure AD Connect (not supported with DirSync).

    Monday, September 14, 2015 1:18 PM
  • Andreas already answered your question.  You are talking about Exchange extension attributes here.

    From Andreas' reply:

    There are attributes named msExchExtensionCustomAttributeX and these come with the Exchange schema. These attributes are sync'ed from on-prem to Azure AD and prepared for use with Exchange Online. However, the Exchange Online interface does not today allow you to select these attributes. These attributes are not visible through Graph (other Exchange attributes are not visible through Graph either). These have very limited use today


    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    Wednesday, September 16, 2015 2:20 PM

All replies

  • Which version of the toll are you using - AADConnect? Which extensions attributes are we talking about? Exchange EAs?

    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    Thursday, September 10, 2015 11:42 AM
  • Hello Santhosh,

    Thank you for the reply.

    We are currently using Active Directory Sync tool (DirSync), not the AADConnect. We want to synchronize extension attributes from Active Directory Domain Services (AD DS) to Windows Azure Active Directory for user object.

    I learnt that, the extension attributes in Active Directory Domain Services (AD DS) can be synchronized to schema extensions in Windows Azure Active Directory. Please correct me if my understanding is wrong.


    Regards, Sagar Acharya acharya.sagar@hotmail.com

    Thursday, September 10, 2015 11:52 AM
  • Hello Sagar Acharya,

    We do support extension attributes from On premise AD to Azure AD. However, we suggest you to check the version of DirSync tool you're currently using.

    See this link to know the DirSync version releases: http://social.technet.microsoft.com/wiki/contents/articles/18429.dirsync-directory-sync-tool-version-release-history.aspx#A14

    Also, refer to the similar discussion here - https://social.msdn.microsoft.com/Forums/en-US/4aa8ed1e-9713-4abf-bb71-0f64eb68fcb4/dirsync-office-365-and-exchange-ad-schema-extension?forum=WindowsAzureAD

    Best Regards

    Sadiqh Ahmed

    ________________________________________________________________________________________________________________

    If a post answers your question, please click Mark As Answer on that post and Vote as Helpful.

    Monday, September 14, 2015 10:44 AM
  • Hello Sadiqh Ahmed,

    Thank you for reply.

    We are currently using the latest version and we observed that the extension attributes are synchronized to exchange online. However have few queries -

    1. The extension attributes in on-premise Ad are synced to exchange online however the name of the attributes are like CustomAttribute1, CustomAttribute2.....so on. Can we access these attributes through Graph APIs ?

    2. Are these CustomAttribute1, CustomAttribute2...so on and schema extensions in Azure AD same ?

    Regards,

    Sagar Acharya


    Regards, Sagar Acharya acharya.sagar@hotmail.com

    Monday, September 14, 2015 10:59 AM
  • There are two types of "extension attributes", so let me discuss both and one of the answers will be relevant to what you are looking for.

    There are attributes named msExchExtensionCustomAttributeX and these come with the Exchange schema. These attributes are sync'ed from on-prem to Azure AD and prepared for use with Exchange Online. However, the Exchange Online interface does not today allow you to select these attributes. These attributes are not visible through Graph (other Exchange attributes are not visible through Graph either). These have very limited use today.

    We also have the feature named Directory Extensions (https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect-get-started-custom/#directory-extension-attribute-sync) which will allow you to pick any on-prem attribute, including custom attributes, and extend the Azure AD schema. These attributes are not visible to Exchange Online but can be accessed through Graph. This feature will require Azure AD Connect (not supported with DirSync).

    Monday, September 14, 2015 1:18 PM
  • Hello Andreas  Kjellman,

    Thank you for reply.

    I am looking for the extension attributes in on-premise AD i.e. extensionAttribute1, extensionAttribute2.. up to extensionAttribute15. Are these attributes synched to Azure AD through DirSync ? If yes, then, are these attributes synced with schema extensions(with name like extension_<appId>_<attributename>) in azure AD and if these are synced to schema attributes in azure AD, can we access these using graph APIs?


    Regards, Sagar Acharya acharya.sagar@hotmail.com

    Wednesday, September 16, 2015 1:07 PM
  • Andreas already answered your question.  You are talking about Exchange extension attributes here.

    From Andreas' reply:

    There are attributes named msExchExtensionCustomAttributeX and these come with the Exchange schema. These attributes are sync'ed from on-prem to Azure AD and prepared for use with Exchange Online. However, the Exchange Online interface does not today allow you to select these attributes. These attributes are not visible through Graph (other Exchange attributes are not visible through Graph either). These have very limited use today


    Santhosh Sivarajan | Houston, TX | www.sivarajan.com
    ITIL,MCITP,MCTS,MCSE (W2K3/W2K/NT4),MCSA(W2K3/W2K/MSG),Network+,CCNA

    Windows Server 2012 Book - Migrating from 2008 to Windows Server 2012

    Blogs: Blogs
    Twitter: Twitter
    LinkedIn: LinkedIn
    Facebook: Facebook

    Microsoft Virtual Academy: Microsoft Virtual Academy

    This posting is provided AS IS with no warranties, and confers no rights.

    Wednesday, September 16, 2015 2:20 PM