How can we improve Azure Active Directory?

← Azure Active Directory

Support for multi-valued attributes synchronized from on premises AD

AD Connect supports synchronizing multi-valued attributes to AAD.
However, AAD doesn't support multi-valued attributes synchronized from on premises AD.

Would be great to have this supported so that for example Dynamic Groups can use multi-value attributes for group membership rules.

79 votes
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Peter Tenor shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

18 comments

Attach a File
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • Remco Olsthoorn commented  ·   ·  Flag as inappropriate

    Yes, this would really be beneficial with Group Based Licensing. Now we have to create more SV custom attributes for assigning licenses......bummer!

  • Paul commented  ·   ·  Flag as inappropriate

    We need to sync multi-valued attributes for Mimecast signatures. Why isn't this possible yet?

  • Mike commented  ·   ·  Flag as inappropriate

    In the meantime, you could update the documentation on Azure extension attributes and Dynamic Groups. I just wasted 3 days of my client's time and money on this until I found this article.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Hi
    this feature is absolutely critical for several of our customers. Any idea when this will be implemented? I notice there hasn't been any clear answer for 9 months... Is it still in the pipe? Thanks

  • Sidney Mulder commented  ·   ·  Flag as inappropriate

    I would really like this implemented. We want to create dynamic groups filled with users selected by custom attributes (multi-valued string) to assign licenses.

  • Andreas Vogt commented  ·   ·  Flag as inappropriate

    multi valued on prem AD attributes synced to Azure AD via AD Connect would really help us, because what we need is to plan a rollout of Azure services based on a organisational tree. Therefore our compay structure is reflecting in one by us created attribute in AD, which is in fact multi valued. Based on that we could use the benefit of dynamic group memberships to enable Azure Apps, to provide the correct licenses / Features and so on. I believe we are not the only big customer who focused this issue.
    Many thanks to take that serious.

Azure Active Directory: Groups/Dynamic groups

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice