2

Azure AD Sync is basically FIM with a PowerShell wrapper and two pre-configured Management Agents. Because of this, it's possible to stop synchronizing an attribute to AD using the FIM GUI that DirSync exposes. i.e. if I no longer want streetAddress to sync to the Office 365 tenant, I disable just that attribute in DirSync.

My question: Is this supported (i.e. documented on TechNet/MSDN anywhere) and are there certain attributes that are required for O365 to work other than userPrincipalName and DisplayName?

2

4 years later, this question is still shown in top Google results but O365 has changed a lot. Now the list of attributes synchronized through AzureAD Connect can be found here (they can be filtered by application):

Azure AD Connect sync: Attributes synchronized to Azure Active Directory

If you do not want to send a particular attribute to Azure, you can do this through the wizard, or by following the procedure here:

Azure AD Connect sync: How to make a change to the default configuration

(see section Do not flow an attribute)

4

I'm having trouble coming up with an official reference. (I'm not surprised, either...)

This Wiki article enumerates a list of attributes required for objects to be "considered for sync". Quoth the article:

  • cn
  • member (applies only to groups)
  • samAccountName (applies only to users)
  • alias (applies only to groups and contacts)
  • displayName (for groups with an mail or proxyAddresses attribute populated)

This seems to be further-corroborated by a RMS team blog posting identifying the minimum attribute set necessary for Azure RMS. Obviously, you're not talking about Azure RMS, but I think it's reasonable to consider these attributes as at least partially overlapping with the list you're looking for.

  • accountEnabled
  • cn
  • displayName
  • mail
  • member
  • objectSid
  • proxyAddresses
  • pwdLastSet
  • securityEnabled
  • usageLocation
  • userPrincipalName

Finally, I found this community post wherein the poster talks about a minimum attribute-set that they came up with.

I'd like to say that I'm shocked that finding an official source for this information is difficult.

3

Here's what I found at TechNet (basically, someone recommending your approach instead of Something Else):

PS, it IS supported to deploy FIM and use whatever attributes you want, but thats a lot of work for your stated requirements...

That looks like a yes to me.

Like Evan, I'm having trouble finding much better.

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.