topic Cloud Identity Engine doesn't show all known attributes in Cloud Identity Engine Discussions

Cloud Identity Engine doesn't show all known attributes

Honza_Linhart — Wed, 22 Feb 2023 14:10:08 GMT

Hi everybody,

I'm wondering why Cloud Identity Engine (CIE) doesn't show all attributes, that should be synchronized from Azure AD.

AAD integration is correctly done, I can see all users in CIE, but when I open user detail, not all attributes are there. When I check user attributes configuration, than it looks ok and attributes in AAD are filled correctly.

I need to be able to get to users telephone number (attribute mobilePhone)

Is it anything that can be solved?

Thank you,

Jan

Re: Cloud Identity Engine doesn't show all known attributes

nikoolayy1 — Wed, 29 Mar 2023 19:13:23 GMT

Have you correctly configured the SAML claims and atrributes on the azure ad? If yes then better ask TAC suppor:

Customize claims issued in the SAML token for enterprise applications

https://learn.microsoft.com/en-us/azure/active-directory/develop/active-directory-saml-claims-customization

Also in the browser of a client user you can debug the saml if you have not encrypted the assertions and to see if the email is in there:

https://knowledgebase.paloaltonetworks.com/KCSArticleDetail?id=kA14u0000008UWRCA2&lang=en_US%E2%80%A9