Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,312 questions
Entra ID Connect Sync and Cloud Sync mapping attribute types
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(153.6, 93%, 24%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ER%3C/text%3E%3C/svg%3E)
ritmo2k
706
Reputation points
I've noticed in both Connect Sync and Cloud Sync, the attribute types don't match those in the Graph REST API.
For example, in both sync facilities, the mobile phone number is mobile, whereas, in Graph, it is mobilePhone?
Since Graph is my only way to view the attribute type names in Entra ID (the UI shows descriptive names), which is correct, how/where do Connect Sync and Cloud Sync translate the names (if the type names match Graph and not Sync)?
{count} votes
-
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(188.79999999999998, 26%, 28%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EN%3C/text%3E%3C/svg%3E)
Navya 6,115 Reputation points Microsoft Vendor2024-06-21T11:55:32.6133333+00:00 Hi @ritmo2k
Thank you for posting this in Microsoft Q&A.
I understand that you are having issues with the attribute types in Entra ID Connect Sync and Cloud Sync not matching those in the Graph REST API.
In Connect Sync synchronization rules are used to control which objects and attributes are synchronized between your Active Directory to Microsoft Entra ID. The Synchronization Rule Editor (SRE) is a resource kit tool, and it is installed with Microsoft Entra Connect Sync. In SRE two different types are listed: Inbound and Outbound. A Synchronization Rule is a configuration object with a set of attributes flowing when a condition is satisfied. The Synchronization Rules have a precedence value indicating how they relate to each other. A Synchronization Rule with a lower numeric value has a higher precedence and in an attribute flow conflict, higher precedence wins the conflict resolution. A transformation in sync rule can have different types: Constant, Direct, and Expression.
For more information about connect Sync: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/concept-azure-ad-connect-sync-default-configuration
In Cloud connect AD Schema is used for Microsoft Entra ID to Active Directory configurations The actual list of Synchronization Rules depends on the detected schema in AD. Currently, the AD Schema isn't discoverable and there's fixed set of mappings. Cloud sync occasionally updates the schema and the list of default attributes that are synchronized. With attribute mapping, you control how attributes are populated in Microsoft Entra ID. Microsoft Entra ID supports four mapping types: Direct, Constant, Expression, None.
For more information about Cloud Sync: https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/how-to-attribute-mapping
In both Connect and Cloud sync facilities, the mobile phone number is mobile, whereas in Entra, the mobile phone number represents a mobile phone. Both the names of the sync and Entra ID attribute are accurate. Based on rule synchronizations and attribute mappings, values translate each other.
Hope this helps. Do let us know if you any further queries.
Thanks,
Navya.
-
-
ritmo2k 706 Reputation points
2024-06-24T13:49:12.1066667+00:00 Hi Navya, thank you for describing what Entra ID Connect Sync and Cloud Sync are.
I am aware of the technologies, unfortunately, your response never addressed my question.
I'd like to understand why the schema differs between the two, and whether a documentation source exists to correlate them.
Sign in to comment