How can we improve Azure Active Directory?

← Azure Active Directory

Support for multi-valued attributes synchronized from on premises AD

AD Connect supports synchronizing multi-valued attributes to AAD.
However, AAD doesn't support multi-valued attributes synchronized from on premises AD.

Would be great to have this supported so that for example Dynamic Groups can use multi-value attributes for group membership rules.

150 votes
Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close

We’ll send you updates on this idea

Peter Tenor shared this idea  ·   ·  Flag idea as inappropriate…  ·  Admin →

29 comments

Sign in
(thinking…)
Sign in with: Microsoft
Forgot password?
Create a password
Signed in as (Sign out)
Close
Close
Submitting...
An error occurred while saving the comment
  • FX commented  ·   ·  Flag as inappropriate

    It is very important to have a multi-valued attributes synchronized and usable as a filter for dynamic Groups.

    I did workaround with a powershell script in AD to fill normal group with my needed criteria. But it is a waste of time and machine ressources.....

    Thanks for finding a way to use synchronised multi-value attributes in Dynamic Groups

  • Kleinow, Benjamin commented  ·   ·  Flag as inappropriate

    Any update?

    It is very necessary to use multi-valued attributes, e.g for dynamic AAD groups. We would like to use 'departmentnumber' to evaluate dynamic group membership.

    But this attribute is multi-valued. It is synched indeed but I cannot use it for the evaluation of group membership.

    So please make it possible to use multi-valued AD attributes.

    Thanks!

  • Claudio commented  ·   ·  Flag as inappropriate

    Please advise if there is an update to this request. It will be incredibly useful to us.

  • Henrik commented  ·   ·  Flag as inappropriate

    Please make organisationsgrupper for Teams like they are in enkla samarbetsytor ;)

  • Paweł Zieliński commented  ·   ·  Flag as inappropriate

    We use departmentNumber in our on-site AD as a cost number. Microsoft in default schema decided to make it a multi-valued attribute (although department is a single-valued). We use only the first row of it. I would be happy to be able to sync it to single-valued Azure attribute as a workaround. Possible?

  • Remco Olsthoorn commented  ·   ·  Flag as inappropriate

    Yes, this would really be beneficial with Group Based Licensing. Now we have to create more SV custom attributes for assigning licenses......bummer!

  • Paul commented  ·   ·  Flag as inappropriate

    We need to sync multi-valued attributes for Mimecast signatures. Why isn't this possible yet?

  • Mike commented  ·   ·  Flag as inappropriate

    In the meantime, you could update the documentation on Azure extension attributes and Dynamic Groups. I just wasted 3 days of my client's time and money on this until I found this article.

  • Anonymous commented  ·   ·  Flag as inappropriate

    Hi
    this feature is absolutely critical for several of our customers. Any idea when this will be implemented? I notice there hasn't been any clear answer for 9 months... Is it still in the pipe? Thanks

← Previous 1

Azure Active Directory: Groups/Dynamic groups

Categories

Feedback and Knowledge Base

(thinking…)
Hosted by UserVoice