Syncing extension attributes from Azure AD (Entra ID)

Overview

To sync extension attributes from Azure AD (Microsoft Entra ID) into Opensense, Opensense needs the attribute name and your Azure tenant ID. A Microsoft administrator finds both and sends them to your Opensense representative.

Send this article to your Microsoft administrator

Finding attribute information depends on your Azure AD environment, so Opensense’s help with these steps is limited.

If the extension attributes you need aren’t in Azure AD yet, add them first with Microsoft Entra Connect. See Syncing Active Directory attributes to Entra ID (directory extensions).

Finding the attribute name and tenant ID

An extension attribute’s full name has the form extension_{ApplicationId}_<attributeName>, for example extension_9d98ed114c4840d298fad781915f27e4_employeeID. Opensense needs the full name.

1. In Microsoft Graph PowerShell, list the extension attributes in your tenant:

   Get-MgDirectoryObjectAvailableExtensionProperty

   Or list the extension attributes and values for one user:

   (Get-MgBetaUser -UserId "<Id or UserPrincipalName>").AdditionalProperties

2. Optional: check a value in Microsoft Graph Explorer. Ask for the attribute by name, because Microsoft Graph returns extension attributes only when you select them:

   https://graph.microsoft.com/beta/users/{user@yourdomain.com}?$select=extension_{ApplicationId}_<attributeName>

3. Find your tenant ID. In the Microsoft Entra admin center, the Overview page shows the Tenant ID.

4. Send the attribute names and the tenant ID to your Opensense representative.

For more ways to view extension attributes, see Microsoft’s Microsoft Entra Connect Sync: Directory extensions.

Previous method: Azure AD Graph Explorer

Azure AD Graph is retired

Microsoft fully retired Azure AD Graph, including graph.windows.net, on August 31, 2025. These steps no longer work. Use the Microsoft Graph steps above.

1. Open Azure AD Graph Explorer.

2. Enter:

   https://graph.windows.net/{{yourdomain.com}}/users/{{user@yourdomain.com}}

   Replace {{yourdomain.com}} and {{user@yourdomain.com}} with your own domain and user. For example:

   https://graph.windows.net/opensense.com/users/tori.scharadin@opensense.com

   You can choose any user.

3. Sign in before you click GO.

4. Copy the results into a text file or an email. The results look similar to the screenshot below.

5. Send them to your Opensense representative.

What’s next

• Syncing Active Directory attributes to Entra ID (directory extensions): add attributes that exist only in on-premises Active Directory.
• What Azure Active Directory fields can be used when syncing with Opensense?: the fields Opensense syncs by default.