How can we improve Azure Active Directory?

← Azure Active Directory

Support for multi-valued attributes synchronized from on premises AD

AD Connect supports synchronizing multi-valued attributes to AAD.
However, AAD doesn't support multi-valued attributes synchronized from on premises AD.

Would be great to have this supported so that for example Dynamic Groups can use multi-value attributes for group membership rules.

86 votes
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Peter Tenor shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

20 comments

Attach a File
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Paweł Zieliński commented  ·   ·  Flag as inappropriate

    We use departmentNumber in our on-site AD as a cost number. Microsoft in default schema decided to make it a multi-valued attribute (although department is a single-valued). We use only the first row of it. I would be happy to be able to sync it to single-valued Azure attribute as a workaround. Possible?

  • Remco Olsthoorn commented  ·   ·  Flag as inappropriate

    Yes, this would really be beneficial with Group Based Licensing. Now we have to create more SV custom attributes for assigning licenses......bummer!

  • Brian Pumphrey commented  ·   ·  Flag as inappropriate

    Just chiming in here to also state that this would be helpful for Group Based Licensing.

  • Paul commented  ·   ·  Flag as inappropriate

    We need to sync multi-valued attributes for Mimecast signatures. Why isn't this possible yet?

  • Mike commented  ·   ·  Flag as inappropriate

    In the meantime, you could update the documentation on Azure extension attributes and Dynamic Groups. I just wasted 3 days of my client's time and money on this until I found this article.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Hi
    this feature is absolutely critical for several of our customers. Any idea when this will be implemented? I notice there hasn't been any clear answer for 9 months... Is it still in the pipe? Thanks

  • Sidney Mulder commented  ·   ·  Flag as inappropriate

    I would really like this implemented. We want to create dynamic groups filled with users selected by custom attributes (multi-valued string) to assign licenses.

  • Andreas Vogt commented  ·   ·  Flag as inappropriate

    multi valued on prem AD attributes synced to Azure AD via AD Connect would really help us, because what we need is to plan a rollout of Azure services based on a organisational tree. Therefore our compay structure is reflecting in one by us created attribute in AD, which is in fact multi valued. Based on that we could use the benefit of dynamic group memberships to enable Azure Apps, to provide the correct licenses / Features and so on. I believe we are not the only big customer who focused this issue.
    Many thanks to take that serious.

  • Rob de Jong (Azure AD IAM) commented  ·   ·  Flag as inappropriate

    Hi - We're working with the teams who own the targeted services for multi-valued attributes to see how they can leverage multi-valued attributes.

Azure Active Directory: Groups/Dynamic groups

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice