IIQ - Azure AD Connector

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hello Team,

We are working on the Azure AD connector and we have few attributes should be added in SP to pull the data, we have added into Schema but still SP not pulling those values from Azure.

Do we need to add any additional configuration along with Schema. Below sample attributes are showing when
onPremisesDistinguishedName
onPremisesSamAccountName
please let me know if more details required.

2

Thanks for posting this! Give us a moment to look into this for you and we will circle back with additional insights for you.

3

Attributes you mentioned are supported by Microsoft Graph API . Connector is enhanced to use MS Graph API for account operation from IIQ version 8.0p4 , 8.1p3 and 8.2 . IIQ versions prior to these are using Azure AD Graph API for account operations , which doesn’t support fetching these attributes.
If you are not on any these versions I would recommend you to upgrade to these version to get these attributes.

Note : Post upgrade existing applications will still be using Azure AD Graph API for account operations . To migrate them to use MS Graph API you need to add following entry in application.


true

Hope this clarifies your query

1 Like
4

@jagdeep.dhamande - Thank you so much.

1 Like
5

Can you use MS Graph to see when was the last time a user used its account or logged in?

6

Did you get your answer?
I am facing the same

7

Hi we got that working.
The point is that those attributes in Azure are created by the AADconnect. As such they live in a schema extension linked to the app registration.

So the attributes are actually called extension_someRandomID_onpremiseDN

You can get the correct full name with the Get-AzureAdUser CMDLet