azure ad connect sync attribute

Question

We have upgraded the AAD connect recently to 2.1.15.
According to 2.0.3 release notes:
"We added the following new user properties to sync from on-premises Active Directory to Azure AD:
employeeType
employeeHireDate "

We really need to sync employee hire date to Azure AD for a 3rd party app.
However I can only find the employeetype in the Directory Extension page of the AAD connect Sync option.

Is there any schema update need to perform in on-prem AD?

Thanks.

Answer 1

Hello @roy lee ,

EmployeeHireDate is an AzureAD attribute. It is present at AADConnect cloud connector schema.
These attributes aren't present in an Active Directory Domain Services (ADDS) schema.

Here's the article which lists the available attributes in ADDS,
https://learn.microsoft.com/en-us/windows/win32/adschema/attributes-all

I will work with an engineering team to get the document updated to avoid confusion.
Hope this helps.

Let us know if this answer was helpful to you or if you need additional assistance. If it was helpful, please remember to accept it and complete the quality survey so that others in the community with similar questions can more easily find a rated solution.

Answer 2

Hi @roy lee ,

Unfortunately, the following attributes are not currently supported by AADConnect.

employeeType
employeeHireDate

I think you should use extensionAttributes instead.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-feature-directory-extensions#customize-which-attributes-to-synchronize-with-azure-ad

Answer 3

Another related issue here is that EmployeeHireDate in Azure AD cannot be set using any method whatsoever if you are syncing from on-premises with AD Connect. No direct edit in the portal. No PowerShell commands from either Az.Resources or Microsoft Graph can do it. So this field is left unusable in this situation.

Using an extensionattribute would get the data to Azure AD, but for those who might want this data to get to a SharePoint User Profile you have another problem because you can't use an extension attribute in their sync engine.

Answer 4

You can flow an AD extension attribute to the MV attribute employeeHireDate which will export successfully to AAD.

Make sure your extension attribute uses Generalized-Time syntax. These dates are strings in the format "YYYYMMDDhhmmss.0Z".
Then create an inbound sync rule to populate employeeHireDate from your AD extension attribute.

This will flow to AAD. This was completed with AAD Connect Version: 2.1.16.0