Azure ad connect change userprincipalname to mail
A great question!
Azure AD Connect is a tool that synchronizes on-premises Active Directory with Azure Active Directory (Azure AD). By default, it maps the userPrincipalName
attribute to the userPrincipalName
attribute in Azure AD. However, you can configure Azure AD Connect to map the userPrincipalName
attribute to the mail
attribute in Azure AD.
Here are the steps to change the userPrincipalName to mail in Azure AD Connect:
Prerequisites:
- Make sure you have Azure AD Connect installed and configured.
- Ensure that you have the necessary permissions to modify the Azure AD Connect configuration.
Step 1: Open Azure AD Connect
Open the Azure AD Connect console by searching for "Azure AD Connect" in the Start menu (Windows) or Spotlight search (macOS).
Step 2: Navigate to the "Configure" tab
In the Azure AD Connect console, navigate to the "Configure" tab.
Step 3: Click on "Directory Extensions"
In the "Configure" tab, click on "Directory Extensions" in the left-hand menu.
Step 4: Find the "userPrincipalName" attribute
In the "Directory Extensions" window, scroll down and find the "userPrincipalName" attribute.
Step 5: Click on the "Edit" button
Click on the "Edit" button next to the "userPrincipalName" attribute.
Step 6: Select "Mail" as the target attribute
In the "Edit Attribute" window, select "Mail" as the target attribute.
Step 7: Click "OK" to save the changes
Click "OK" to save the changes.
Step 8: Synchronize the changes
To apply the changes, click on the "Synchronize" button in the Azure AD Connect console.
After synchronizing the changes, the userPrincipalName
attribute in Azure AD will be updated to match the mail
attribute in your on-premises Active Directory.
Important notes:
- Changing the
userPrincipalName
attribute tomail
will update theuserPrincipalName
attribute for all users in Azure AD. Make sure to test this change in a non-production environment before applying it to your production environment. - If you have any custom applications or services that rely on the
userPrincipalName
attribute, you may need to update those applications or services to use themail
attribute instead.