Understanding Azure AD Custom User Attributes

Question

Understanding Azure AD Custom User Attributes

Katie P 21

I'm trying to add a new attribute to an Azure AD user called "External Id." I've added that custom attribute to External Identities User Flow, but having trouble understanding where that is stored when I collect that info?

What I'm really trying to accomplish is adding new fields to the Users Profile page... such as under Job Info or Contact Info. Is this possible??

1 answer

Your answer

Answer 1

AmanpreetSingh-MSFT 56,871 Moderator

Hi @Katie P · Thank you for reaching out.

Custom attributes are not displayed on the user's profile page in the portal. You need to either use Graph API or PowerShell to see this attribute and its value.

Graph API:

GET https://graph.microsoft.com/v1.0/users/object_id_of_the_user?$select=displayName,extension_GUID_yourCustomAttribute

Read more: https://learn.microsoft.com/en-us/graph/api/user-get?view=graph-rest-1.0&tabs=http

PowerShell:

Get-AzureADUser -ObjectId object_id_of_the_user | select -ExpandProperty ExtensionProperty

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

Katie P 21 Reputation points

2021-06-16T05:10:09.027+00:00

@AmanpreetSingh-MSFT How do I find the value of extension_GUID_yourCustomAttribute?
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-06-17T06:51:34.32+00:00

@Katie P · Did you try above Graph Call or PowerShell cmdlet? Both methods will return the attribute name and its value, only when a value is assigned.
Katie P 21 Reputation points

2021-06-17T21:27:06.227+00:00

@AmanpreetSingh-MSFT I was trying to use Microsoft Graph. So I would pass in "extension_GUID_yourCustomAttribute" and not replace it with something else?

However, there seems to be a bug or something with the select function in Microsoft graph if logged in with a person account. I can get the select to work using my work account in my organization's tenant, but it will not work with my personal Microsoft account tenant. It just returns the same standard fields no matter what I have in the select. Same issue reported here: https://stackoverflow.com/questions/50013804/microsoft-graph-odata-select-query-parameter-doesnt-select
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-06-18T06:26:51.66+00:00

@Katie P · You can use GET https://graph.microsoft.com/beta/users/object_id_of_the_user to see the Value of GUID. This call returns all attributes of the given user, including extension attributes.

You cannot use personal account as in that case Graph Explorer won't be able to identify the tenant it should connect to. When you specify work account, it connects to the home tenant where the work account resides.
Katie P 21 Reputation points

2021-06-29T18:16:40.173+00:00

@AmanpreetSingh-MSFT I was able to get my personal account to get past that bug by going to https://developer.microsoft.com/en-us/graph/graph-explorer?tenant={mytenant} instead.

So now I can call https://graph.microsoft.com/beta/users/object_id_of_the_user, but I don't see my custom attribute in it. If it only returns value if it's assigned, how would I find the information on the guid of that attribute before it's assigned? I am not assigning it in signup.
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-07-01T04:49:55.593+00:00

Hi @Katie P · When you create custom attribute under External Identities blade of your Azure AD tenant, it always use the App ID of the aad-extensions-app as the guid for the custom attribute.

The guid will be without any hyphens in the attribute name, as shown below:

When custom attributes are added to B2C tenant, it uses b2c-extensions-app.

The query parameter ?tenant={mytenant} doesn't always work as expected, which is why I always suggest using member user account. However, if it works for you, I don't see any harm using it.
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-07-12T08:26:22.213+00:00

Hi @Katie P · Just checking if you need any further assistance.
AmanpreetSingh-MSFT 56,871 Reputation points Moderator

2021-07-22T04:47:37.69+00:00

Hi @Katie P · Is the issue resolved?

Share via

Understanding Azure AD Custom User Attributes

1 answer

Your answer