Identity management through Azure AD

Question

Hello everyone, good afternoon!

Does anyone know how I create a specific property for identity management in Azure AD.

Example: In addition to the department, city, first and last name information, I would like to create a CPF field for example or any other field that does not have it by default.

Answer 1

You can add custom attribute according to your requirement. An attribute set is a collection of related attributes. All custom security attributes must be part of an attribute set. Attribute sets cannot be renamed or deleted.

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/custom-security-attributes-add

Sign in to the Azure portal.

Click Azure Active Directory > Custom security attributes (Preview).

Click Add attribute set to add a new attribute set.

If Add attribute set is disabled, make sure you are assigned the Attribute Definition Administrator role

Enter a name, description, and maximum number of attributes.

An attribute set name can be 32 characters with no spaces or special characters.

Answer 2

Hello Luiz,

Have a look at using Extension Attributes with Azure AD:

Azure AD cmdlets to work with extension attributes

https://learn.microsoft.com/en-us/powershell/azure/active-directory/using-extension-attributes-sample?view=azureadps-2.0

Extension attributes offer a convenient way to extend your Azure AD directory with new attributes that you can use to store attribute values for objects in your directory. You can attach an extension attribute to the following object types:

• users
• tenant details
• devices
• applications

Create a new extension property

https://learn.microsoft.com/en-us/powershell/azure/active-directory/using-extension-attributes-sample?view=azureadps-2.0#create-a-new-extension-property

---

If this is helpful please accept answer.