Active Directory Administration Cookbook

How it works...

Beyond the Azure AD app and attribute filtering default functionality, MinSync offers a way to minimize the attributes synchronized in scope of Azure AD Connect.

Taking attributes out of scope for Azure AD Connect puts an organization on the path of having out-of-date attribute values for objects in Azure AD, as these attributes are no longer synchronized. However, not synchronizing attributes also means that some attributes, such as the first name, last name, and other attributes that end users can modify through the MyProfile interface remain empty. Some other attributes remain non-modifiable. When taking these attributes (back) into scope, these user-defined values will be overwritten by the attribute values stored in Active ...