sharepoint 2013 azure ad application proxy - set email property in user profile

MARCEL BALCAREK 61 Reputation points


We are using the Azure AD Application Proxy to allow users to sign on to our on-premise SharePoint 2013 system with Azure AD credentials. Ref:

I have noticed that when I invite an Azure AD user to a SharePoint group, their Work Email (email) user profile property is not set.

I can set it manually by using Set-SPUser, but is there a way to set it automatically via the proxy?

Update: In it indicates that the proxy address is mapped to the work email. I have checked and the proxy address is set correctly.
Do I need to have a functioning User Profile Sync to make this work?

SharePoint Server Management
SharePoint Server Management
SharePoint Server: A family of Microsoft on-premises document management and storage systems.Management: The act or process of organizing, handling, directing or controlling something.
2,791 questions
0 comments No comments
{count} votes

3 answers

Sort by: Most helpful
  1. Echo Du_MSFT 17,111 Reputation points


    According to my research, we recommend you to have a functioning User profile synchronization.

    Echo Du


    If an Answer is helpful, please click "Accept Answer" and upvote it.
    Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

  2. Balcarek, Marcel 76 Reputation points

    The issue is not resolved. I have a guest user from Azure AD invited into SharePoint 2013 on-premise by inviting the user to a SP group


    Here are my settings in the Azure AD Enterprise application:


    My User Profile Synch Service Application is 'started' and User Profile Synch Service is 'started', but I do not see the new user in Central Admin; Manage User Profiles.

    0 comments No comments

  3. Balcarek, Marcel 76 Reputation points

    The tutorial documentation ( changed about 5/5/2021, so I have adjusted my claims section in azure AD

    It seems like the email claim is no longer required (?) and I have removed it from the above Claims list. Based on the tutorial and - I expect the Work Email to still be populated.

    This article also suggests "Typically, user profiles are created automatically for all accounts that are created in Microsoft 365. For organizations that have a Microsoft 365 Education subscription, user profiles are not created for new accounts by default. The user must access SharePoint once, at which time a basic stub profile will be created for the user account. The stub profile will be updated with all remaining data as part of the sync process."

    I am using a developer tenant - I noticed that the user shows up in Central Admin; Manage User Profiles once the user has signed on to SharePoint on-premise the first time.
    Update: after the users first signon and having checked their profile existed in Central Admin; Manage User Profiles - I ran the full synchronization timer job - after this job completed, the "work email" is still not populated.

    Do I need to set anything up in Central Admin, for the User Profile Service Application - under Synchronization "Configure Synchronization Connections"? Currently this area is empty.

    Any advise is appreciated.

    0 comments No comments