Caution
This synchronization type is only available in the "Software as a Service" model.
Microsoft Graph
User data in Azure Active Directory can be read via the MicrosoftGraphSyncSource
.
The following properties are provided by Microsoft Graph:
id
faxNumber
employeeId
userPrincipalName
aboutMe
city
companyName
country
department
displayName
givenName
jobTitle
mail
mailNickname
mobilePhone
mySite
officeLocation
postalCode
preferredLanguage
preferredName
state
streetAddress
surname
userType
accountEnabled
birthday
: If present, the date is returned as ISO 8601 date.businessPhone
: In Microsoft Graph, multiple phone numbers can be stored under thebusinessPhones
property. To allow easy mapping, the first phone number is provided asbusinessPhone
.onPremisesExtensionAttribute1
-onPremisesExtensionAttribute15
: To allow easier mapping, the 15onPremisesExtensionAttribute
s are provided as direct properties (onPremisesExtensionAttribute1
etc.).photo
: The user image is provided asphoto
.
For a description of Microsoft Graph properties, see the Documentation from Microsoft.
Configuration
<?xml version="1.0" encoding="utf-8" ?>
<UserSyncConfig>
<MicrosoftGraphSyncSource name="AzureAD" queryKey="OneOffixxIdentifier">
<Claims>
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" ignoreClaimIfEmpty="true" property="preferredName" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/displayName" ignoreClaimIfEmpty="true" property="displayName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" ignoreClaimIfEmpty="true" property="givenName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" ignoreClaimIfEmpty="true" property="surname" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" ignoreClaimIfEmpty="true" property="mail" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage" ignoreClaimIfEmpty="true" property="mySite" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/phone" ignoreClaimIfEmpty="true" property="businessPhone" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress" ignoreClaimIfEmpty="true" property="streetAddress" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode" ignoreClaimIfEmpty="true" property="postalCode" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country" ignoreClaimIfEmpty="true" property="country" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality" ignoreClaimIfEmpty="true" property="city" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone" ignoreClaimIfEmpty="true" property="mobilePhone" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/department" ignoreClaimIfEmpty="true" property="department" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/company" ignoreClaimIfEmpty="true" property="companyName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" ignoreClaimIfEmpty="true" property="userPrincipalName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince" ignoreClaimIfEmpty="true" property="state" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/photo" property="photo" />
</Claims>
</MicrosoftGraphSyncSource>
</UserSyncConfig>
ResultMapping
The MicrosoftGraphSyncSource
supports the following mapping format:
<?xml version="1.0" encoding="utf-8" ?>
<UserSyncConfig>
<MicrosoftGraphSyncSource name="AzureAD" queryKey="OneOffixxIdentifier">
<ResultMapping>
<Mapping>
<Map Source="displayName" Target="PropertyX" />
</Mapping>
</ResultMapping>
<Claims>
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" ignoreClaimIfEmpty="true" property="preferredName" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/displayName" ignoreClaimIfEmpty="true" property="displayName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" ignoreClaimIfEmpty="true" property="givenName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" ignoreClaimIfEmpty="true" property="surname" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" ignoreClaimIfEmpty="true" property="mail" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage" ignoreClaimIfEmpty="true" property="mySite" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/phone" ignoreClaimIfEmpty="true" property="businessPhone" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress" ignoreClaimIfEmpty="true" property="streetAddress" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode" ignoreClaimIfEmpty="true" property="postalCode" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country" ignoreClaimIfEmpty="true" property="country" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality" ignoreClaimIfEmpty="true" property="city" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone" ignoreClaimIfEmpty="true" property="mobilePhone" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/department" ignoreClaimIfEmpty="true" property="department" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/company" ignoreClaimIfEmpty="true" property="companyName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" ignoreClaimIfEmpty="true" property="userPrincipalName" />
<Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince" ignoreClaimIfEmpty="true" property="state" />
<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/photo" property="photo" />
</Claims>
</MicrosoftGraphSyncSource>
</UserSyncConfig>
The target
is a value that must correlate with the property parameter of a claim. Details and configuration examples can be found here: Mapping.