Is it possible to get LitigationHoldEnabled exchange attribute value in Azure Active Directory?

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Which IIQ version are you inquiring about?

Version 8.4

Share all details related to your problem, including any error messages you may have received.

I need to get “LitigationHoldEnabled” which is exchange attribute in Azure AD.
I tried using graph API as well but no luck.
Is there any one worked on this and able to fetch the “LitigationHoldEnabled” value in Azure AD.

2

have you tried doing something like this:

  1. Connect to Exchange Online

  2. Connect to Azure AD
    3.get the Exchange Online mailbox

  3. $mailboxe = Get-Mailbox -ResultSize Unlimited -Identity identity

    1. Check if LitigationHoldEnabled is set

    $litigationHoldEnabled = $mailbox.LitigationHoldEnabled

  4. Write LitigationHoldEnabled attribute to Azure AD user object
    Set-AzureADUser -ObjectId (Get-AzureADUser -Filter “UserPrincipalName eq ‘$userPrincipalName’”).ObjectId -OtherAttributes @{‘extensionAttribute1’ = $litigationHoldEnabled}

3

I am able to set and clear LitigationHoldEnabled value via PS commands now i want that value to be populated as a schema attribute for Azure AD link because in 8.4 version sailpoint said we can get exchange attributes in Azure AD connector

4

can you point me to the section where it says that? Also, if you update this value in one of the azure attributes, then you should be able to see it in IIQ via aggreation. Is that not working?

5

https://documentation.sailpoint.com/connectors/identityiq/microsoft/azure_ad/help/integrating_azure_active_directory/exchange_online_mailbox_management.html

It mentions using the EXO_ prefix and gives an example of EXO_EmailAddresses but EXO_LitigationHoldEnabled doesn’t seem to work in this case.

1 Like
6

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.