Azure AD - customSecurityAttributeValue Filters in Account Import

[rushikeshvartak]

• Use case : Importing Service Account based on flag stored in Custom Security Attribute 
• Background
  • We have already utilized all extensible attributes hence we can't store service account type in Externsible attribute or user attribute 
• Connector : Azure AD
• Configuration : ACCOUNT_IMPORT_FIELDS
  • id,userPrincipalName&$expand=customSecurityAttributes
• Issue : Accounts import failed:
  • Parsing OData Select and Expand failed: Property 'customSecurityAttributes' on type 'microsoft.graph.user' is not a navigation property or complex property. Only navigation properties can be expanded.
• 
• Need confirmation on support of customSecurityAttributeValue by Azure AD connector
• 

[prafullgoyal]

Hi @rushikeshvartak ,

Because the problem is associated with the process of accessing the graph API, the graph API does not support the expand operation for "customSecurityAttributes". Could you please locate the screenshot?

Try "?$select=id,userPrincipalName,customSecurityAttributes" It should work.

Thanks 

Prafull,

[rushikeshvartak]

What will be mapping in ACCOUNT_ATTRIBUTES?

"customproperty23": "customSecurityAttributes.ABC.AccountType~#~char",

Its not working

[prafullgoyal]

Hi @rushikeshvartak ,

Which error are you experiencing, if any? May I kindly request that you share the logs in order to validate the request, response, and error?

Thanks 

Prafull, 

[rushikeshvartak]

Please find logs for pre-import preview ( expected value should come in cp23)

[prafullgoyal]

Hi @rushikeshvartak ,

I am unable to locate the "customSecurityAttributeValue" attribute value that has been retrieved by the "AzureAD" Connector while I am looking through the logs. Or there is a lack of data for the top two ids. Please check to see if the data is available, and if it is, then you ought to try REST and let me know the results.

Thanks 

Prafull,

[rushikeshvartak]

We know it will work with REST Connector but we don't want another connector for this use case.

[prafullgoyal]

You have attempted to store the whole "customSecurityAttributeValue" JSON in cp23, have you?

Thanks 

Prafull,

[rushikeshvartak]

I tried 3 variation 

• customSecurityAttributes
• customSecurityAttributes.ABC
• customSecurityAttributes.ABC.AccountType

[prafullgoyal]

Could you please share the Postman response of below request?

"https://graph.microsoft.com/v1.0/users?$count=true&$select=id,userPrincipalName,companyName,givenNa...

Thanks 

Prafull,