Skip to main content
Solved

Azure AD mapping

  • Feb 7, 2023 10:09 AM UTC
  • 11 replies
  • 169 views
Forum|alt.badge.img+10

hello,

We migrated our JSS from an LDAP connection to Azure AD (Cloud Identity Providers).
But we are unable to map certain AzureAD attributes such as 'businessPhone' or extensions such as 'extension_3bf6422528194f1aae559105e4bace82_division'.

Have you ever had this type of problem?

Thanks for your help

Best answer by Jaykrishna1

Yes, it is common to face mapping issues while migrating to a new identity provider. Mapping attributes and extensions from the previous identity provider to the new one may require additional configuration.

I would recommend checking if the missing attributes are present in the user's Azure AD profile and if they are exposed for mapping in Jamf Pro. You can also check the Azure AD documentation for information on how to expose additional attributes for mapping.

View original

    11 replies

    Jaykrishna1
    Forum|alt.badge.img+8
    • Jaykrishna1
    • Jamf Heroes
    • Answer
    • Feb 7, 2023 10:15 AM UTC

    Yes, it is common to face mapping issues while migrating to a new identity provider. Mapping attributes and extensions from the previous identity provider to the new one may require additional configuration.

    I would recommend checking if the missing attributes are present in the user's Azure AD profile and if they are exposed for mapping in Jamf Pro. You can also check the Azure AD documentation for information on how to expose additional attributes for mapping.

    Forum|alt.badge.img+10
    • glpi-ios
    • Author
    • Valued Contributor
    • Feb 7, 2023 10:34 AM UTC

    Ok thanks for your help @Jaykrishna1 

    I will try to find out from Microsoft.

      Jaykrishna1
      Forum|alt.badge.img+8
      • Jaykrishna1
      • Jamf Heroes
      • Feb 7, 2023 10:37 AM UTC

      Great then.

      PorkChopExpress
      Forum|alt.badge.img+2

      PI104636 - businessPhones and officeLocation mappings do not retrieve any data on user lookup: Azure Cloud IDP with Jamf Pro 10.32

        Forum|alt.badge.img+10
        • glpi-ios
        • Author
        • Valued Contributor
        • May 22, 2023 1:20 PM UTC

        Thank you for your help.

        However, I can't find this PI in the ongoing or resolved issues.
        We have just upgraded to Jamf Pro 10.45 and the problem still persists.
        Is it resolved or still ongoing?

        Thank you for your assistance.

          Forum|alt.badge.img+4
          • JCMBowman
          • Contributor
          • Jun 27, 2023 8:03 PM UTC

          PI104636 - businessPhones and officeLocation mappings do not retrieve any data on user lookup: Azure Cloud IDP with Jamf Pro 10.32


          Any chance you could update us on if this is still an issue?

          I just setup up Azure AD as a cloud connection and the officeLocation mapping is working fine for me, but neither businessPhone nor businessPhones are pulling any data.

          dstranathan
          Forum|alt.badge.img+20
          • dstranathan
          • Valued Contributor
          • Oct 18, 2023 2:20 PM UTC

          Just migrated from on-prem to Jamf Cloud. officeLocation does not map for me between Jamf Pro 10.50 and my MS Azure/Entra IdP.

            Forum|alt.badge.img+2
            • NGuedes
            • New Contributor
            • Oct 25, 2023 4:11 PM UTC

            Just migrated from on-prem to Jamf Cloud. officeLocation does not map for me between Jamf Pro 10.50 and my MS Azure/Entra IdP.


            Hi 

            I have exactly the same problem.
            On Microsoft Graph Explorer API I manage to get the data of the attribute, but on Jamf Pro I get "no value" while testing.

              Forum|alt.badge.img+2
              • NGuedes
              • New Contributor
              • Nov 29, 2023 3:13 PM UTC

              Just migrated from on-prem to Jamf Cloud. officeLocation does not map for me between Jamf Pro 10.50 and my MS Azure/Entra IdP.


              Hi,

              I opened a ticket for Jamf Support, they confirmed this only works when you have already a Building set up on Jamf Pro settings with the exact same name.

              After creating the buildings needed, it started working for me.

              Best regards!

                dstranathan
                Forum|alt.badge.img+20
                • dstranathan
                • Valued Contributor
                • Nov 29, 2023 11:06 PM UTC

                Is the value name for the building attribute  "Building"? in your Azure instance?

                Forum|alt.badge.img+2
                • NGuedes
                • New Contributor
                • Nov 30, 2023 9:39 AM UTC

                Is the value name for the building attribute  "Building"? in your Azure instance?


                Hi,

                No, we have several buildings actually, but what I mean is that every officelocation value on Azure must match a Building name on Jamf Pro settings.

                That way, Jamf Pro can read and populate the Building on "User and Location"

                Best regards!

                  Terms & ConditionsAccessibility statement