IP Phone attribute missing inside Entra ID

Question

Hello folks,
I quickly describe my scenario:
I manage a on-premise domain controller (Win Server 2022) and a Microsoft 365 tenant.
These two environment are synchronized using "Microsoft Entra Connect Sync" (password hash).

All users are properly in sync with the M365 account, however I am not able to see IP Phone attribute in Entra ID.

I need Entra ID attribute to manage integration between a cloud phone system and Azure AD.

Is IP Phone attribute hidden in Azure AD?

Thanks a lot

Answer 1

Issue: ipPhone attribute is synchronised by default from Active Directory but is not visible in the UI or via Graph API in EntraID.

Solution: The ipPhone attribute needs to be mapped to an Extension attribute in either Connect Sync or Cloud Sync depending on your config.

Pre-requisite: You must have added the Directory Extensions for this additional attribute to be available: https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-feature-directory-extensions

Once that is in place, you can map the ipPhone attribute via one of these methods:

Connect Sync: Enable the following Directory Extension: OtherIpPhone  (this is different to the ipPhone attribute which is already synched).

Cloud Sync: Add the Attribute Mapping between ipPhone and the extension attribute  "extension_xxxxxxxxxxxxxxxxxxxxxx_ipPhone" (where the xxxxxxxx matches the extension ID for the Directory Extension Enterprise App ObjectID) .

After a sync, the attribute is available as an extended attribute via MgGraph: https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/custom-attribute-mapping?tabs=ps

Answer 2

Entra/Azure AD does not expose workload-specific attributes, such as IpPhone. Similarly, there are other Exchange/SfB attributes that you will not be able to see anywhere in the Entra admin center or via the Graph API. Check the requirements/setup instructions from the vendor to make sure they can correctly map this property.