Entra/AAD User Import - Extension Attributes/User Filters

[Samuel]

Hi all, 

We currently use the AAD User Import Tool for our internal users, mostly with success. However, as part of a new process I need to adjust the script and I'm having two issues:

1) I need to swap from a complex group-based filter, to a user-based one. To make that happen, I need a UserFilter query that looks for the Department user attribute AND the Entra UserType. Unfortunately I can get neither to work, let alone both as a combination, nor can I find a useful example elsewhere of how to configure this properly. 

2) I need to get the Extension Attributes from Entra to map them to the Extension Attributes in Hornbill. I know I need to specify that somehow under "UserProperties", but the User Import Wiki links to a frankly useless (for me) MS article that doesn't state how to query these Extension Attributes (or give an example). 

Has anyone got any pervious experience with this that they'd be willing to share, please?

[Victor]

On 04/06/2024 at 16:12, Samuel said:

I need a UserFilter query that looks for the Department user attribute AND the Entra UserType. Unfortunately I can get neither to work, let alone both as a combination, nor can I find a useful example elsewhere of how to configure this properly

1. The import tool relies on MS Graph API for filters. You can find some more information about how this works and how it can be configured here: https://learn.microsoft.com/en-us/graph/api/user-list?view=graph-rest-1.0&tabs=http#examples/. The import tool can only work with using user filters or group filters but not a combination of both. You would set which ones to be used in the "Search" parameter, with two possible values: "users" or "groups". In terms of how to configure a filter, I found this resource quite helpful, it allows one to try various queries, filters, etc: https://developer.microsoft.com/en-us/graph/graph-explorer

2. Since this is MS functionality we won't be able to provide much here apart from links to their documentation. However, based on my (not extensive) knowledge of MS, extensions show up in Microsoft Graph within the Extensions collection, they are not top-level properties. Our Entra import tool does not currently process extensions, but this is something that will be available in a future import tool update (possibly even next release).

[Steve G]

Hi @Samuel,

With regards to point 2 - which type of extension attributes are you attempting to retrieve? 

• Extension attributes (referred to as On Premises Extension Attributes in the Microsoft Docs)
• Directory (Microsoft Entra ID) extensions
• Schema extensions
• Open extensions

If it's the first one, then this is nice and easy - you can already get at these by adding onPremisesExtensionAttributes to the lits of user properties, then map one of the 15 available attributes (extensionAttribute1...extensionAttribute15) as per the attached example:

If you're referring to one or more of the other 3 extension attribute types, then this isn't currently possible but we will investigate options further.

Cheers,

Steve