Attribute Mapping in Azure AD Provisioning

ShashankSaxena-2458 131 Reputation points
2024-06-25T07:20:08.1466667+00:00

Hello All,

I hope you all are doing good.

We’re integrating SuccessFactors HRIS solution with Entra ID. During synchronization from SF to Entra ID, several attributes have limitations. Suppose the username attribute sends a character limit of 256, but Entra allows only 128 characters. In this case, what would be the behavior on the Entra side? Will it truncate the value or fail the process?

Regards,

Shashank Saxena

Microsoft Entra External ID
Microsoft Entra External ID
A modern identity solution for securing access to customer, citizen and partner-facing apps and services. It is the converged platform of Azure AD External Identities B2B and B2C. Replaces Azure Active Directory External Identities.
2,924 questions
Microsoft Entra Internet Access
Microsoft Entra Internet Access
A Microsoft Entra service that provides an identity-centric Secure Web Gateway that protects access to internet, software as a service (SaaS), and Microsoft 365 apps and resources.
26 questions
Microsoft Entra
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,178 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. ALI Mrehach 15 Reputation points
    2024-06-25T07:35:16.4566667+00:00

    From experience ( not 100% sure ) Azure will take 128 char name and ignore the rest. I think this behavior will create a future problem for you. Best is to adjust SF as er Azure then deploy the app.


  2. Givary-MSFT 33,311 Reputation points Microsoft Employee
    2024-06-26T05:06:10.6733333+00:00

    @ShashankSaxena-2458 Thank you for reaching out to us, regarding the above-mentioned issue - We’re integrating SuccessFactors HRIS solution with Entra ID. During synchronization from SF to Entra ID, several attributes have limitations. Suppose the username attribute sends a character limit of 256, but Entra allows only 128 characters. In this case, what would be the behavior on the Entra side? Will it truncate the value or fail the process?

    If any attribute exceeds the limit enforced by the AD or Entra ID, then the operation (Create/Update) will fail for the entire object. 

    Recommended way to handle this scenario is to use Mid function and truncate the incoming values from SuccessFactors so they fit into the constraints set by AD / Entra ID. 

    e.g.  Entra ID companyName can have max of 64 characters, so if you're mapping the SF company attribute to it, then use the expression - Mid([company], 1, 64) 

    Let me know if you have any further questions, feel free to post back.

    Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.


Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.