# Azure AD Connector Aggregation

**URL:** <https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800>\
**Category:** SHF Discussion and Questions\
**Tags:** aggregation, sailpoint-identity-security\
**Created:** [March 19, 2025, 11:40am UTC](https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800 "2025-03-19T11:40:30Z")\
**Posts on this page:** 4\
**Page:** 1

<div class="post-metadata">

**Author:** ![saunakRheem91](https://avatars.discourse-cdn.com/v4/letter/s/aca169/32.png) [@saunakRheem91](https://developer.sailpoint.com/discuss/u/saunakRheem91)\
**Post date:** [March 19, 2025, 11:40am UTC](https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800/1 "2025-03-19T11:40:31Z")

</div>

Hi Experts,

We are trying to aggregate extensionAttributes from Azure AD which we provisioned successfully from SailPoint IdentityNow.

We followed the format of onPremisesExtensionAttributes\_ and were successful to provision values to the target Azure AD account.

But during aggregating the account back to Sailpoint via AAD connector aggregation, it is setting the values for those extensionAttributes as blank, it is unable to fetch the values from Azure to SailPoint IDN.

I used graph API to fetch the values and validate and found the values are actually present in target Azure provisioned but not able to fetch it back to SailPoint during aggregation.

I saw an article posted 1 year back old which says Sailpoint AAD connector does not support fetching extensionAttribute values back from Azure and an enhancement request is opened for the same - [Azure AD connector Accounts Aggregation - #7](https://developer.sailpoint.com/discuss/t/azure-ad-connector-accounts-aggregation/34053/7)

1. Is this still valid and that SailPoint AAD connector still doesnt support ?

2. Is there an alternate efficient way to fetch and store aggregate to SailPoint from Azure the values for the extensionAttributes?

---

<div class="post-metadata">

**Author:** ![agutschow](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/agutschow/32/8543_2.png) [@agutschow](https://developer.sailpoint.com/discuss/u/agutschow)\
**Post date:** [March 19, 2025, 3:18pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800/2 "2025-03-19T15:18:34Z")

</div>

You should be able to use advanced filters.

> **[Advanced query capabilities on Microsoft Entra ID objects - Microsoft Graph](https://learn.microsoft.com/en-us/graph/aad-advanced-queries?tabs=http)**
>
> Microsoft Entra ID objects support advanced query capabilities to efficiently access data.

You will need to add the graphAPI to the schema as mentioned:

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/7/d/7d768e911a3d9f5df4cb259b9d7238ed6272352d.png)

> **[Additional Configuration Parameters](https://documentation.sailpoint.com/connectors/microsoft/azure_ad/help/integrating_azure_active_directory/additional_configuration_parameters.html)**

---

<div class="post-metadata">

**Author:** ![jesvin90](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/jesvin90/32/5301_2.png) [@jesvin90](https://developer.sailpoint.com/discuss/u/jesvin90)\
**Post date:** [March 19, 2025, 3:53pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800/3 "2025-03-19T15:53:49Z")

</div>

Hi @saunakRheem91,

Are you following [this](https://documentation.sailpoint.com/connectors/microsoft/entra_id/help/integrating_entra_id/custom_attributes.html) document for setting up the extension attributes.?

I have been able to successfully provision and aggregate the attributes in my tenant with a VA based Entra connector. Here is how it looks like, incase you have named the attribute incorrectly :

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/0/c/0c848b74fbc65246c9b7b3bca57e91c0035d38ac.png)

![image](https://global.discourse-cdn.com/sailpoint/original/3X/c/3/c3b79d00e5e46364a45a219265f2782fc442bded.png)

Also, have you done a full aggregation (not a targeted account) after the provisioning process.?

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 18, 2025, 3:53pm UTC](https://developer.sailpoint.com/discuss/t/azure-ad-connector-aggregation/104800/4 "2025-05-18T15:53:51Z")

</div>

Closed on May 18, 2025, 3:53pm UTC

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.