Share via

Attribute Mapping in Azure AD Provisioning

ShashankSaxena-2458 131 Reputation points
2024-06-25T07:20:08.1466667+00:00

Hello All,

I hope you all are doing good.

We’re integrating SuccessFactors HRIS solution with Entra ID. During synchronization from SF to Entra ID, several attributes have limitations. Suppose the username attribute sends a character limit of 256, but Entra allows only 128 characters. In this case, what would be the behavior on the Entra side? Will it truncate the value or fail the process?

Regards,

Shashank Saxena

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,755 questions
Microsoft Entra Internet Access
Microsoft Entra Internet Access
A Microsoft Entra service that provides an identity-centric Secure Web Gateway that protects access to internet, software as a service (SaaS), and Microsoft 365 apps and resources.
18 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,501 questions
0 comments

2 answers

Sort by: Most helpful
Most helpful Newest Oldest
  1. ALI Mrehach 10 Reputation points
    2024-06-25T07:35:16.4566667+00:00

    From experience ( not 100% sure ) Azure will take 128 char name and ignore the rest. I think this behavior will create a future problem for you. Best is to adjust SF as er Azure then deploy the app.

  2. Givary-MSFT 30,521 Reputation points Microsoft Employee
    2024-06-26T05:06:10.6733333+00:00

    @ShashankSaxena-2458 Thank you for reaching out to us, regarding the above-mentioned issue - We’re integrating SuccessFactors HRIS solution with Entra ID. During synchronization from SF to Entra ID, several attributes have limitations. Suppose the username attribute sends a character limit of 256, but Entra allows only 128 characters. In this case, what would be the behavior on the Entra side? Will it truncate the value or fail the process?

    If any attribute exceeds the limit enforced by the AD or Entra ID, then the operation (Create/Update) will fail for the entire object. 

    Recommended way to handle this scenario is to use Mid function and truncate the incoming values from SuccessFactors so they fit into the constraints set by AD / Entra ID. 

    e.g.  Entra ID companyName can have max of 64 characters, so if you're mapping the SF company attribute to it, then use the expression - Mid([company], 1, 64) 

    Let me know if you have any further questions, feel free to post back.

    Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.