How to check Azure AD Connect settings for Attributes filtering

Question

How to check Azure AD Connect settings for Attributes filtering

Lim Chong Sun 531

From the Azure AD Connect GUI, I can get all existing settings.
But how can I check which attributes are configured currently? Other than running the AADC Documenter tool?

VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee

2020-10-21T04:48:15.1+00:00

@Lim Chong Sun I wanted to follow up and know if the below response helped in answering your query. If it did, please do not forget to accept the response as Answer

Accepted answer

1 additional answer

Your answer

VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee

2020-10-21T04:48:15.1+00:00

@Lim Chong Sun I wanted to follow up and know if the below response helped in answering your query. If it did, please do not forget to accept the response as Answer

Answer 1

VipulSparsh-MSFT 16,311 Microsoft Employee

@Lim Chong Sun

1) Under Azure AD connect synchronization configuration export we list the Attribute which are excluded. This is a exclude only list and appears only when if you have used the wizard to select few attribute sync options.

You can check the view or export the current configuration and check for any attribute under excluded Attribute list :

Once exported, you can see the list of attributes which were excluded from sync. For eg in my lab scenario I excluded all these attribute from syncing :

============================================================================================================

2) You can also go to the current configuration and Look for Azure AD attributes and select the view attributes option :

It will open a file which can show you which attribute are getting synced and are not removed :

-----------------------------------------------------------------------------------------------------------------

If the suggested response helped you resolve your issue, please do not forget to accept the response as Answer and "Up-Vote" for the answer that helped you for benefit of the community.

Lim Chong Sun 531 Reputation points

2020-10-18T23:33:30.917+00:00

For Method 1, it only shows attributes that are exported? What is extenstionattribute1?

For Method 2, in my current configuration, under Sync I only have up to Optional Features.

How come I don't have Apps and Attributes? Is it because my Azure AD Connect version is 1.1.x?

The previous one who did configuration didn't have any documentation. and I need to do a swing upgrade.

How can I get what was previously configured for these?
These are sample images of a new installation.
Any filtering done

The Azure apps configured

And of course attributes

If there are no ways to view from the GUI, is there a Powershell script to extract these settings?
Or how to view from the Documenter?

Thanks.
VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee

2020-10-19T05:09:34.753+00:00

@Lim Chong Sun

1) Yes, this shows shows only the excluded ones. extenstionattribute1 is just another AD attribute which can be used to populate any value admin wants.
2) My AAD Connect version is : 1.5.45.0

Also do note, Starting on November 1st, 2020, we will begin implementing a deprecation process whereby versions of Azure AD Connect that were released more than 18 months ago will be deprecated. At that time we will begin this process by deprecating all releases of Azure AD Connect with version 1.3.20.0 (which was released on 4/24/2019) and older, and we will proceed to evaluate the deprecation of older versions of Azure AD Connect every time a new version releases.
(Reference : https://learn.microsoft.com/en-us/azure/active-directory/hybrid/reference-connect-version-history)

The documenter tool does have a attribute options, what do you see there ?
Lim Chong Sun 531 Reputation points

2020-10-19T05:42:19.92+00:00

Thanks for reverting.

Does it mean everything under the Select Attributes are selected?

Or I have to look at column Flows Configured?. Ignore those with No and only select those that are Import, Export, Import/Export?
Lim Chong Sun 531 Reputation points

2020-10-19T05:57:51.253+00:00

Yes I am well aware of the 18 months support release. This is why I am doing a swing upgrade. The problem is I got all the previous settings except for if we sync all users and devices, if any Azure AD apps are restricted, and if any exported attributes are excluded. So I need to find out all these before we can mitigate the risk to do a swing upgrade.

And because I am on 1.1.x now, I don't have the Export existing configuration feature. So I can't use Method 1 too.
VipulSparsh-MSFT 16,311 Reputation points Microsoft Employee

2020-10-20T05:23:34.49+00:00

@Lim Chong Sun Yes for the attribute part, select all that is listed there. For the Flows part, also check for the provisioning rules for users (In from AD) just to verify if the rules explicitly mentions those attributes as well.

Answer 2

EnterpriseArchitect 6,041

Hi @VipulSparsh-MSFT is it the same as in this GUI ?

Share via

How to check Azure AD Connect settings for Attributes filtering

1 additional answer

Your answer