Sync User Attributes with Microsoft 365

After you鈥檝e authorized sync with Microsoft 365 (M365), you can choose the attributes that you want to import or export with Microsoft.聽

Note:

If you are trying to integrate with Entra ID, see Configure Real-time User Provisioning from Entra ID to 黑料海角91入口.

Prerequisites:

You must have sync authorized and active on the M365 directory. See M365/Entra ID Directory Sync

Attribute Data Flow

How does attribute data flow between M365 and 黑料海角91入口 after integration?

Data flow for synced user attributes:

When you import a user from M365:聽If data exists for a user鈥檚 attributes in M365, only the following data is written to the equivalent user attributes in 黑料海角91入口:
- Email
- First Name
- Last Name
- Username
When you bind that user to M365 in 黑料海角91入口:聽Attributes in M365 are automatically overwritten with data from 黑料海角91入口. Further, any subsequent changes made to the user鈥檚 attributes in 黑料海角91入口 are automatically pushed to the corresponding attributes in M365

User Attribute Export

With the exception of several attributes that are selected by default, you can choose the user attributes聽you would like to export to M365. Selected attributes are automatically synced with M365. This means that after you export an attribute to M365, data for that attribute is sent from 黑料海角91入口 to M365. Likewise, if you choose to stop exporting data for an attribute, it is no longer synced with M365. Subsequent changes made to that attribute in 黑料海角91入口 are not exported to M365.

Warning:

Take caution when selecting attributes to export. After you select an attribute to export to M365 it is听颈尘尘别诲颈补迟别濒测听辞惫别谤飞谤颈迟迟别苍聽with data from 黑料海角91入口, and you could potentially lose data stored for that attribute in M365. See聽Attribute Data聽below to learn about how attribute data is exported to聽M365.

Attributes that are聽always聽exported to M365:

黑料海角91入口 attribute	M365/Entra ID attribute
firstname	givenName
lastname	surname
password	password
Company Email	userPrincipalName
firstname + lastname	displayName

*鈥婣 user's first name and last name are exported together as M365's聽Display name聽field. If a user's first or last name is changed in 黑料海角91入口, M365's聽Display name聽field updates with the new name value.

Attributes that can聽辞辫迟颈辞苍补濒濒测听be聽exported to M365:

黑料海角91入口 attribute	M365/Entra ID attribute
addresses.work.country	country
addresses.work.locality	city
addresses.work.postalCode	postalCode
addresses.work.region	state
addresses.work.streetAddress	streetAddress
alternateEmail	otherEmails
department	department
jobTitle	jobTitle
location	officeLocation
manager	manager
phoneNumbers.mobile.number	mobilePhone
phoneNumbers.work.number	businessPhone

Attribute Data

The following table outlines how attribute data is exported from 黑料海角91入口鈥檚 API and UI to M365鈥檚 API and UI. The attribute listed in the 黑料海角91入口 API Attribute Name column is exported to the attribute listed in the M365 API Attribute Name column. The attribute listed in the 黑料海角91入口 UI Attribute Name column is exported to the attribute listed in the M365 UI Attribute Name column. Be aware that M365 and Entra ID use multiple UI labels for the same data. The following M365 UI Attribute names represent what is used when an administrator adds or edits details for a user in M365.

See related API documentation: .

User Attribute Syncing with M365

黑料海角91入口 API Attribute Name	M365 API Attribute Name	黑料海角91入口 UI Attribute Name	M365 UI Attribute Name	Notes
Calculated: First Name + Last Name	displayName	Calculated: First Name + Last Name	Display name	-
firstname	givenName	First Name	First name	-
lastname	surname	Last Name	Last name	-
password	password	Password	Password	-
email OR alternateEmail	userPrincipalName	Company Email	Email	The userPrincipalName attribute can be used to specify an alternate email address for cross-domain application access.
jobTitle	jobTitle	Job Title	Job title	-
department	department	Department	Department	-
location	officeLocation	Location	Office	-
addresses.work.streetAddress	streetAddress	Work Street Address	Street Address	-
addresses.work.locality	city	Work City	City	-
addresses.work.region	state	Work State	State or province	-
addresses.work.postalCode	postalCode	Work Postal Code	ZIP or postal code	-
addresses.work.country	country	Work Country	Country or region	-
phoneNumbers.work.number	businessPhone	Work Phone	Business Phone	-
phoneNumbers.mobile.number	mobilePhone	Personal Cell	Mobile Phone	-

Selecting Attributes to Export

To select attributes to export to M365:

Log in to the .
Go to Directory Integrations > Cloud Directories.
Select the M365 directory you want to select user attributes for.
In the聽User Attributes Export聽section, select the non-default user attributes you want to export to M365. You can鈥檛 clear default user attributes.
Click save.

After you configure user attributes to sync from 黑料海角91入口 to Microsoft,聽bind users to M365. See Giving 黑料海角91入口 Users Access to M365.

Directory Insights Events

Anytime you change the direction of an attribute, a Directory Insights event is generated.

Directory Insights events generated from attribution selections are:

integrationattribute_exclude
- Generated when an attribute is set to 鈥淓xclude鈥�.
  - Ex: You change the Department attribute from 鈥淚mport鈥� to 鈥淓xclude鈥�
integrationattribute_include
- Generated when an attribute is set to 鈥淚mport鈥� or 鈥淓xport鈥�.
  - Ex: You change the Department attribute from 鈥淓xclude鈥� to 鈥淚mport鈥�
  - Ex: You change the Department attribute from 鈥淚mport鈥� to 鈥淓xport鈥�

These events will capture attribute ownership/direction changes, including the admin that made the change, and the directory integration in which the change occurred.