How to add SamAccountName as a source attribute in provisioning

Question

I can see according to this documentation here: https://t.co/rNmJamIwZg "some attributes (such as SAMAccountName) that are synchronized by default might not be exposed using the Microsoft Graph API. In these cases, you can use the Azure AD Connect directory extension feature to synchronize the attribute to Azure AD. That way, the attribute will be visible to the Microsoft Graph API and the Azure AD provisioning service."

But would anyone know the steps to be taken to implement this? I can't seem to find it

Answer 1

SamAccountName gets synced as onPremisesSamAccountName, so just use that.

Answer 2

Hello @Jacob White ,

I suspect that statement is for older version of graph api, which is graph.windows.net. However, with the newer version of graph api i.e., graph.microsoft.com it is exposed as onPremisesSamAccountName and can be found by using either of the below calls via graph explorer:

• https://graph.microsoft.com/v1.0/users/synceduser[@](/users/na/?userId=12dda09b-4001-0003-0000-000000000000).com?$select=onPremisesSamAccountName
• https://graph.microsoft.com/beta/users/synceduser[@](/users/na/?userId=12dda09b-4001-0003-0000-000000000000).com

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.