Mail and ProxyAddresses Attributes Unchanged in Azure AD

Question

Mail and ProxyAddresses Attributes Unchanged in Azure AD

Michael Liben 261

I have a user sync’d to on-premises domain. No Exchange hybrid in the environment. The mail and proxyAddresses are updated in on-premises Active Directory and AAD Connect shows the new values are synchronized to Azure AD. However, when we inspect the user in portal.azure.com, the values are not updated. When we check via Graph Explorer, it also shows the old values. A full import from Azure in AAD Connect shows the modified values but they still do not appear in the portal or Graph.

Any idea what may be causing this?

Accepted answer

0 additional answers

Your answer

Answer 1

JimmySalian-2011 42,511

@Michael Liben can you update other attribute in OnPrem AD and check if it is getting changed in Azure AD? Next is to run the troubelshooting steps for the object for this you will need the ObjectGuid and provide in the tool.

There are few things you can check permissions on the object and also run the tool to check the issue.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/tshoot-connect-objectsync

Hope this helps.

JS

==

Please accept as answer and do a Thumbs-up to upvote this response if you are satisfied with the community help. Your upvote will be beneficial for the community users facing similar issues.

Michael Liben 261 Reputation points

2023-03-08T20:44:11.73+00:00

Yes, we can update the streetAddress for the same user and the new value is reflected in AAD. It seems only the mail-related values are not updating: mail, mailNickname (a.k.a. alias), and proxyAddresses. I'll dig further with the tool and follow up here.

FWIW, I'm an old MIM guy so completely comfortable looking at AAD Connect via miisclient.
Michael Liben 261 Reputation points

2023-03-08T22:50:02.6866667+00:00

JS -

I had troubles performing the object sync analysis because it wasn't liking my AAD credentials even though I am a Hybrid Identity Administrator. However, in one of the Exchange tests, I noticed this being output to the console:

I found this in one of the AADSync diagnostic tests for Exchange:

IMPORTANT:

Azure Active Directory does NOT allow to synchronize email addresses from the on-premises directory in case:

a- the domain part of the on-premises email address is NOT a domain name verified with the Azure AD tenant.

b- the domain part of the on-premises email address is the default tenant domain name ending with "onmicrosoft.com".

This may be what I am experiencing. In our case, both a and b are true. We are using a QA domain which does not have any verified domain names.

I'm going to close the issue for now. Thanks for your assistance.

Mike Liben

Share via

Mail and ProxyAddresses Attributes Unchanged in Azure AD

0 additional answers

Your answer