Synchronization Azure User attribute UserType in customappsso

Vladislav Aripov 1 Reputation point
2022-06-29T13:38:44.067+00:00

Hello!
I am working on synchronization attribute UserType with my customappsso to devide users into guests and members with the ability to dynamically change the user type from Azure.
I found some articles about this and they seem controversial.
This article says that using source attribute UserType not available 'by default' (https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/known-issues#attribute-samaccountname-or-usertype-not-available-as-a-source-attribute). It looks like there is an opportunity to change this behavior, but I still didn't find the appropriate solution.
And this article says that using source attribute UserType not available at all, but there is a few scrutches to forge attribute UserType behaviour. (https://learn.microsoft.com/en-us/azure/active-directory/cloud-sync/how-to-map-usertype)
Is there a way to set up synchronization of the UserType attribute directly?

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,902 questions
0 comments No comments
{count} votes

1 answer

Sort by: Most helpful
  1. Vladislav Aripov 1 Reputation point
    2022-07-01T01:53:06.297+00:00

    Yeah!!! I found it!

    I wrote instruction how to synchronize attribute UserType directly (in Russian, but it should be easy to translate)

    Для настройки сопоставления атрибута UserType необходимо:

    1. Зайти на портал Azure по ссылке https://portal.azure.com/?Microsoft_AAD_Connect_Provisioning_forceSchemaEditorEnabled=true (look at the note in this article https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/customize-application-attributes#editing-the-list-of-supported-attributes)
    2. Перейти на страницу сопоставлений пользователя в настраиваемом корпоративном приложении
    3. Перейти по ссылке внизу страницы "Изменить список атрибутов для Azure Active Directory". (отображается, когда включен флаг "Показать расширенные параметры")
    4. Если внизу списка атрибутов Azure не отображается "userType", его необходимо добавить и сохранить изменения (name: "userType", type: string, required: true)
    5. Добавляем новое сопоставление в наше корпоративное приложение, где в поле "Исходный атрибут" выбираем userType
    6. Это все!

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.