add multiple values to ad connect synchronization rule

Yim, Sam 121 Reputation points
2022-04-18T19:20:22.14+00:00

Is it possible to add more than one value to the value field? for example, I'm trying to filter out all names that begin with 'abc' and 'bu'.
193982-image.png

Azure Active Directory
Azure Active Directory
An Azure enterprise identity service that provides single sign-on and multi-factor authentication.
14,738 questions
{count} votes

2 answers

Sort by: Most helpful
  1. Bruno Miranda 81 Reputation points
    2022-04-18T21:02:42.957+00:00

    Hello follow the oficial docs here - https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-configure-filtering#inbound-filtering

    There is a logical "AND" between multiple clauses, and a logical "OR" between multiple groups

    In this docs - we found this https://learn.microsoft.com/en-us/azure/active-directory/hybrid/concept-azure-ad-connect-sync-declarative-provisioning

    STARTSWITH, NOTSTARTSWITH A string compare that evaluates if value is in the beginning of the value in the attribute.

    So I recommend you to separate your conditions in groups

    Group1 - Name Attribute - STARTSWITH - abc

    Group2 - Name Attribute - STARTSWITH - Bu

    1 person found this answer helpful.

  2. Siva-kumar-selvaraj 15,206 Reputation points
    2022-04-29T21:05:36.807+00:00

    Hi @Yim, Sam ,

    Thanks for reaching out.

    Adding more than one value to the value field is not supported, thus you must add multiple GROUPS in the scoping filter in this case, like anonymous user suggested.

    0 comments No comments