You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/cloud-sync/how-to-attribute-mapping.md
+42-41Lines changed: 42 additions & 41 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -7,15 +7,17 @@ manager: amycolannino
7
7
ms.service: active-directory
8
8
ms.workload: identity
9
9
ms.topic: how-to
10
-
ms.date: 01/11/2023
10
+
ms.date: 01/20/2023
11
11
ms.subservice: hybrid
12
12
ms.author: billmath
13
13
ms.collection: M365-identity-device-management
14
14
---
15
15
16
16
# Attribute mapping in Azure AD Connect cloud sync
17
17
18
-
You can use the cloud sync feature of Azure Active Directory (Azure AD) Connect to map attributes between your on-premises user or group objects and the objects in Azure AD. This capability has been added to the cloud sync configuration.
18
+
You can use the cloud sync attribute mapping feature to map attributes between your on-premises user or group objects and the objects in Azure AD.
19
+
20
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-1.png" alt-text="Screenshot of new UX screen attribute mapping." lightbox="media/how-to-attribute-mapping/new-ux-mapping-1.png":::
19
21
20
22
You can customize (change, delete, or create) the default attribute mappings according to your business needs. For a list of attributes that are synchronized, see [Attributes synchronized to Azure Active Directory](../hybrid/reference-connect-sync-attributes-synchronized.md?context=azure%2factive-directory%2fcloud-provisioning%2fcontext%2fcp-context/hybrid/reference-connect-sync-attributes-synchronized.md).
21
23
@@ -54,7 +56,10 @@ For more information on how to map UserType, see [Map UserType with cloud sync](
54
56
55
57
## Understand properties of attribute mappings
56
58
57
-
Along with the type property, attribute mappings support certain attributes. These attributes will depend on the type of mapping you have selected. The following sections describe the supported attribute mappings for each of the individual types
59
+
Along with the type property, attribute mappings support certain attributes. These attributes will depend on the type of mapping you have selected. The following sections describe the supported attribute mappings for each of the individual types. The following type of attribute mapping is available.
60
+
- Direct
61
+
- Constant
62
+
- Expression
58
63
59
64
### Direct mapping attributes
60
65
The following are the attributes supported by a direct mapping:
@@ -66,7 +71,7 @@ The following are the attributes supported by a direct mapping:
66
71
-**Always**: Apply this mapping on both user-creation and update actions.
67
72
-**Only during creation**: Apply this mapping only on user-creation actions.
68
73
69
-

74
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-2.png" alt-text="Screenshot of editing attribute mapping." lightbox="media/how-to-attribute-mapping/new-ux-mapping-2.png":::
70
75
71
76
### Constant mapping attributes
72
77
The following are the attributes supported by a constant mapping:
@@ -77,8 +82,6 @@ The following are the attributes supported by a constant mapping:
77
82
-**Always**: Apply this mapping on both user-creation and update actions.
78
83
-**Only during creation**: Apply this mapping only on user-creation actions.
79
84
80
-

81
-
82
85
### Expression mapping attributes
83
86
The following are the attributes supported by an expression mapping:
84
87
@@ -90,61 +93,59 @@ The following are the attributes supported by an expression mapping:
90
93
-**Always**: Apply this mapping on both user-creation and update actions.
91
94
-**Only during creation**: Apply this mapping only on user-creation actions.
92
95
93
-

94
-
95
96
## Add an attribute mapping
96
97
97
-
To use the new capability, follow these steps:
98
-
99
-
1. In the Azure portal, select **Azure Active Directory**.
100
-
2. Select **Azure AD Connect**.
101
-
3. Select **Manage cloud sync**.
102
-
103
-

104
-
105
-
4. Under **Configuration**, select your configuration.
106
-
5. Select **Click to edit mappings**. This link opens the **Attribute mappings** screen.
98
+
To use attribute mapping, follow these steps:
107
99
108
-

100
+
1. In the Azure portal, select **Azure Active Directory**.
101
+
2. On the left, select **Azure AD Connect**.
102
+
3. On the left, select **Cloud sync**.
103
+
104
+
:::image type="content" source="media/how-to-on-demand-provision/new-ux-1.png" alt-text="Screenshot of new UX screen." lightbox="media/how-to-on-demand-provision/new-ux-1.png":::
109
105
110
-
6. Select **Add attribute**.
106
+
4. Under **Configuration**, select your configuration.
107
+
5. On the left, select **Attribute mapping**.
108
+
6. At the top, ensure that you have the correct object type selected. That is, user, group, or contact.
109
+
7. Click **Add attribute mapping**.
111
110
112
-

111
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-3.png" alt-text="Screenshot of adding an attributemapping." lightbox="media/how-to-attribute-mapping/new-ux-mapping-3.png":::
113
112
114
-
7. Select the mapping type. This can be one of the following:
113
+
8. Select the mapping type. This can be one of the following:
115
114
-**Direct**: The target attribute is populated with the value of an attribute of the linked object in Active Directory.
116
115
-**Constant**: The target attribute is populated with a specific string that you specify.
117
116
-**Expression**: The target attribute is populated based on the result of a script-like expression.
118
117
-**None**: The target attribute is left unmodified.
119
-
120
-
For more information see See [Understanding attribute types](#understand-types-of-attribute-mapping) above.
121
-
8. Depending on what you have selected in the previous step, different options will be available for filling in. See the [Understand properties of attribute mappings](#understand-properties-of-attribute-mappings)sections above for information on these attributes.
122
-
9. Select when to apply this mapping, and then select **Apply**.
123
-
11. Back on the **Attribute mappings** screen, you should see your new attribute mapping.
124
-
12. Select **Save schema**.
118
+
119
+
9. Depending on what you have selected in the previous step, different options will be available for filling in.
120
+
10. Select when to apply this mapping, and then select **Apply**.
121
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-4.png" alt-text="Screenshot of saving an attribute mapping." lightbox="media/how-to-attribute-mapping/new-ux-mapping-4.png":::
122
+
123
+
11. Back on the **Attribute mappings** screen, you should see your new attribute mapping.
124
+
12. Select **Save schema**. You will be notified that once you save the schema, a synchronization will occur. Click **OK**.
125
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-5.png" alt-text="Screenshot of saving schema." lightbox="media/how-to-attribute-mapping/new-ux-mapping-5.png":::
125
126
126
-

127
+
13. Once the save is successful you will see a notification on the right.
128
+
129
+
:::image type="content" source="media/how-to-attribute-mapping/new-ux-mapping-6.png" alt-text="Screenshot of successful schema save." lightbox="media/how-to-attribute-mapping/new-ux-mapping-6.png":::
127
130
128
131
## Test your attribute mapping
129
132
130
133
To test your attribute mapping, you can use [on-demand provisioning](how-to-on-demand-provision.md):
131
134
132
-
1. In the Azure portal, select **Azure Active Directory**.
133
-
2.Select**Azure AD Connect**.
134
-
3.Select **Manage provisioning**.
135
-
4. Under **Configuration**, select your configuration.
136
-
5.Under **Validate**, select the **Provision a user** button.
137
-
6.On the **Provision on demand** screen, enter the distinguished name of a user or group and select the **Provision** button.
138
-
139
-
The screen shows that the provisioning is in progress.
135
+
1. In the Azure portal, select **Azure Active Directory**.
136
+
2. On the left, select**Azure AD Connect**.
137
+
3. On the left, select **Cloud sync**.
138
+
4. Under **Configuration**, select your configuration.
139
+
5.On the left, select **Provision on demand**.
140
+
6.Enter the distinguished name of a user and select the **Provision** button.
141
+
142
+
:::image type="content" source="media/how-to-on-demand-provision/new-ux-2.png" alt-text="Screenshot of user distinguished name." lightbox="media/how-to-on-demand-provision/new-ux-2.png":::
140
143
141
-

144
+
7. After provisioning finishes, a success screen appears with four green check marks. Any errors appear to the left.
142
145
143
-
8. After provisioning finishes, a success screen appears with four green check marks.
146
+
:::image type="content" source="media/how-to-on-demand-provision/new-ux-3.png" alt-text="Screenshot of on-demand success." lightbox="media/how-to-on-demand-provision/new-ux-3.png":::
144
147
145
-
Under **Perform action**, select **View details**. On the right, you should see the new attribute synchronized and the expression applied.
146
148
147
-

0 commit comments