How to use AD claims in User Profile

AD claims are attributes coming from Active Directory, and they can be used to fill out User Profile information. This article explains how to map AD claims to User Profile fields.

How to map AD claims in User Profile

1. Go to the Admin Center.
2. Navigate to the Users section.
3. Select User Profile tab.
4. Click Edit form.
5. Click Add form field.
6. Select Textbox as the Type and fill out the other required fields in the General tab.
7. Go to the Configuration tab.
8. Scroll down to the field Active Directory Claim.
9. Select an AD claim you wish to map to this form field.
10. Select the Active Directory update configuration (explained in detail below).
11. Click Add field.
    

    Note Only TextBox fields can be used to map AD claims in the User Profile. Custom claims are only supported with SAML2 (not supported with OpenID Connect).

Active Directory update configuration

Admins have the opportunity to set restrictions on User Profile fields that are synced with Active Directory. When editing is allowed (top two options), automatic updates are treated accordingly:

• User Profile fields will be automatically updated as long as the user does not manually change the value. Auto-updates will stop if a value is manually updated/removed.
• Auto-updates can be re-enabled by clicking Update your user profile from your company data at the top of the User Profile form.