add multiple values to ad connect synchronization rule

Yim, Sam 126 Reputation points
2022-04-18T19:20:22.14+00:00

Is it possible to add more than one value to the value field? for example, I'm trying to filter out all names that begin with 'abc' and 'bu'.
193982-image.png

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,608 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Bruno Leires 81 Reputation points
    2022-04-18T21:02:42.957+00:00

    Hello follow the oficial docs here - https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#inbound-filtering

    There is a logical "AND" between multiple clauses, and a logical "OR" between multiple groups

    In this docs - we found this https://learn.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-declarative-provisioning

    STARTSWITH, NOTSTARTSWITH A string compare that evaluates if value is in the beginning of the value in the attribute.

    So I recommend you to separate your conditions in groups

    Group1 - Name Attribute - STARTSWITH - abc

    Group2 - Name Attribute - STARTSWITH - Bu

    1 person found this answer helpful.

  2. Siva-kumar-selvaraj 15,601 Reputation points
    2022-04-29T21:05:36.807+00:00

    Hi @Yim, Sam ,

    Thanks for reaching out.

    Adding more than one value to the value field is not supported, thus you must add multiple GROUPS in the scoping filter in this case, like anonymous user suggested.

    0 comments No comments