Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
You can use directory extensions to extend the schema of users and groups, and then use those attributes for scoping and attribute mapping. If you're looking for directory extensions when provisioning from Active Directory to Microsoft Entra ID, see Cloud sync directory extensions and custom attribute mapping.
Important
Directory extensions for Microsoft Entra Cloud Sync are supported only for applications with the identifier URI api://<tenantId>/CloudSyncCustomExtensionsApp and the Tenant Schema Extension App created by Microsoft Entra Connect.
For step-by-step examples of extending the schema and then using directory extension attributes with cloud sync provisioning to Active Directory, see Use directory extensions when provisioning to Active Directory. That article covers both users and groups.
Ways to create directory extensions
You can create directory extensions in Microsoft Entra ID in several different ways. The following table provides links and additional information.
| Method | Description | URL |
|---|---|---|
| Microsoft Graph | Create extensions using Microsoft Graph | Create extensionProperty |
| PowerShell | Create extensions using PowerShell | New-MgApplicationExtensionProperty |
| Microsoft Entra Connect | Create extensions using Microsoft Entra Connect | Create an extension attribute using Microsoft Entra Connect |