Skip to main content
Version: 4.1 (2026 H2)

Microsoft Graph

User data in Entra ID can be read via the MicrosoftGraphSyncSource. The following properties are provided by Microsoft Graph:

  • id

  • faxNumber

  • employeeId

  • userPrincipalName

  • aboutMe

  • city

  • companyName

  • country

  • department

  • displayName

  • givenName

  • jobTitle

  • mail

  • mailNickname

  • mobilePhone

  • mySite

  • officeLocation

  • postalCode

  • preferredLanguage

  • preferredName

  • state

  • streetAddress

  • surname

  • userType

  • accountEnabled

  • birthday: If present, the date is returned as ISO 8601 date.

  • businessPhone: In Microsoft Graph, multiple phone numbers can be stored under the businessPhones property. To allow easy mapping, the first phone number is provided as businessPhone.

  • onPremisesExtensionAttribute1 - onPremisesExtensionAttribute15: To allow easier mapping, the 15 onPremisesExtensionAttributes are provided as direct properties (onPremisesExtensionAttribute1 etc.).

  • photo: The user image is provided as photo.

For a description of Microsoft Graph properties, see the Microsoft documentation.

Prerequisites​

Synchronization via Microsoft Graph requires the primedocs Entra ID app with the application permission User.Read.All (Microsoft Graph). Setup and the complete list of required permissions are described under Entra ID Apps › API Permissions.

note

If the application permission cannot be granted, the SCIM interface is available as an alternative for user and group synchronization.

Configuration​

note

The name attribute (name="AzureAD" in the example) is freely selectable and only serves to name the SyncSource.

<?xml version="1.0" encoding="utf-8" ?>
<UserSyncConfig>
	<MicrosoftGraphSyncSource name="AzureAD" queryKey="OneOffixxIdentifier">
        <Claims>
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" ignoreClaimIfEmpty="true" property="preferredName" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/displayName" ignoreClaimIfEmpty="true" property="displayName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" ignoreClaimIfEmpty="true" property="givenName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" ignoreClaimIfEmpty="true" property="surname" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" ignoreClaimIfEmpty="true" property="mail" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage" ignoreClaimIfEmpty="true" property="mySite" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/phone" ignoreClaimIfEmpty="true" property="businessPhone" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress" ignoreClaimIfEmpty="true" property="streetAddress" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode" ignoreClaimIfEmpty="true" property="postalCode" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country" ignoreClaimIfEmpty="true" property="country" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality" ignoreClaimIfEmpty="true" property="city" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone" ignoreClaimIfEmpty="true" property="mobilePhone" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/department" ignoreClaimIfEmpty="true" property="department" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/company" ignoreClaimIfEmpty="true" property="companyName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" ignoreClaimIfEmpty="true" property="userPrincipalName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince" ignoreClaimIfEmpty="true" property="state" />
			<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/photo" property="photo" />
        </Claims>
    </MicrosoftGraphSyncSource>
</UserSyncConfig>

ResultMapping​

The MicrosoftGraphSyncSource supports the following mapping format:

<?xml version="1.0" encoding="utf-8" ?>
<UserSyncConfig>
	<MicrosoftGraphSyncSource name="AzureAD" queryKey="OneOffixxIdentifier">
        <ResultMapping>
		    <Mapping>
			    <Map Source="displayName" Target="PropertyX" />
		    </Mapping>
        </ResultMapping>
        <Claims>
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/name" ignoreClaimIfEmpty="true" property="preferredName" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/displayName" ignoreClaimIfEmpty="true" property="displayName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/givenname" ignoreClaimIfEmpty="true" property="givenName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/surname" ignoreClaimIfEmpty="true" property="surname" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/emailaddress" ignoreClaimIfEmpty="true" property="mail" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/webpage" ignoreClaimIfEmpty="true" property="mySite" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/phone" ignoreClaimIfEmpty="true" property="businessPhone" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/streetaddress" ignoreClaimIfEmpty="true" property="streetAddress" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/postalcode" ignoreClaimIfEmpty="true" property="postalCode" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/country" ignoreClaimIfEmpty="true" property="country" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/locality" ignoreClaimIfEmpty="true" property="city" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/mobilephone" ignoreClaimIfEmpty="true" property="mobilePhone" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/department" ignoreClaimIfEmpty="true" property="department" />
            <Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/company" ignoreClaimIfEmpty="true" property="companyName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/upn" ignoreClaimIfEmpty="true" property="userPrincipalName" />
            <Claim type="http://schemas.xmlsoap.org/ws/2005/05/identity/claims/stateorprovince" ignoreClaimIfEmpty="true" property="state" />
			<Claim type="http://schema.oneoffixx.com/ws/2011/01/identity/claims/photo" property="photo" />
        </Claims>
    </MicrosoftGraphSyncSource>
</UserSyncConfig>

The target is a value that must correlate with the property parameter of a claim. Details and configuration examples can be found here: Mapping.