---
title: "Syncing extension attributes from Azure AD (Entra ID)"
slug: "syncing-extension-attributes-from-azure-ad"
description: "Find an extension attribute's full name and your tenant ID with Microsoft Graph, and send them to Opensense to sync the attribute into signatures."
updated: 2026-10-13T00:00:00.000Z
canonical: "https://help.opensense.com/docs/syncing-extension-attributes-from-azure-ad"
---

> ## Documentation Index
> Fetch the complete documentation index at: https://help.opensense.com/llms.txt
> Use this file to discover all available pages before exploring further.

# Syncing extension attributes from Azure AD (Entra ID)

## Overview

To sync extension attributes from Azure AD (Microsoft Entra ID) into Opensense, Opensense needs the attribute name and your Azure tenant ID. A Microsoft administrator finds both and sends them to your Opensense representative.

:::note[Send this article to your Microsoft administrator]
Finding attribute information depends on your Azure AD environment, so Opensense's help with these steps is limited.
:::

If the extension attributes you need aren't in Azure AD yet, add them first with Microsoft Entra Connect. See [Syncing Active Directory attributes to Entra ID (directory extensions)](https://help.opensense.com/docs/if-you-have-configured-a-white-labeled-tracking-and-hosting-url-and-your-organization-uses-microsoft-direct-access-you-may-need-to-do-one-minor-confi).


## Finding the attribute name and tenant ID

An extension attribute's full name has the form `extension_{ApplicationId}_<attributeName>`, for example `extension_9d98ed114c4840d298fad781915f27e4_employeeID`. Opensense needs the full name.

1. In Microsoft Graph PowerShell, list the extension attributes in your tenant:

   ```powershell
   Get-MgDirectoryObjectAvailableExtensionProperty
   ```

   Or list the extension attributes and values for one user:

   ```powershell
   (Get-MgBetaUser -UserId "<Id or UserPrincipalName>").AdditionalProperties
   ```

2. Optional: check a value in [Microsoft Graph Explorer](https://aka.ms/ge). Ask for the attribute by name, because Microsoft Graph returns extension attributes only when you select them:

   ```text wrap
   https://graph.microsoft.com/beta/users/{user@yourdomain.com}?$select=extension_{ApplicationId}_<attributeName>
   ```

3. Find your tenant ID. In the Microsoft Entra admin center, the **Overview** page shows the **Tenant ID**.
4. Send the attribute names and the tenant ID to your Opensense representative.

For more ways to view extension attributes, see Microsoft's [Microsoft Entra Connect Sync: Directory extensions](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-sync-feature-directory-extensions#viewing-extended-attributes-in-microsoft-entra-id).

## Previous method: Azure AD Graph Explorer

:::caution[Azure AD Graph is retired]
Microsoft fully retired Azure AD Graph, including `graph.windows.net`, on August 31, 2025. These steps no longer work. Use [the Microsoft Graph steps above](#finding-the-attribute-name-and-tenant-id).
:::

1. Open Azure AD Graph Explorer.
2. Enter:

   ```text
   https://graph.windows.net/{{yourdomain.com}}/users/{{user@yourdomain.com}}
   ```

   Replace `{{yourdomain.com}}` and `{{user@yourdomain.com}}` with your own domain and user. For example:

   ```text
   https://graph.windows.net/opensense.com/users/tori.scharadin@opensense.com
   ```

   You can choose any user.

3. Sign in before you click **GO**.
4. Copy the results into a text file or an email. The results look similar to the screenshot below.
5. Send them to your Opensense representative.

![Azure AD Graph Explorer results for a user, with the extension attribute extension_9d98ed114c4840d298fad781915f27e4_employeeID highlighted and labels pointing to the tenant ID and attribute name parts](https://help.opensense.com/media/syncextension1-22c10b7bc47d.png)

## What's next

- [Syncing Active Directory attributes to Entra ID (directory extensions)](https://help.opensense.com/docs/if-you-have-configured-a-white-labeled-tracking-and-hosting-url-and-your-organization-uses-microsoft-direct-access-you-may-need-to-do-one-minor-confi): add attributes that exist only in on-premises Active Directory.
- [What Azure Active Directory fields can be used when syncing with Opensense?](https://help.opensense.com/docs/what-azure-active-directory-fields-can-be-used-when-syncing-with-opensense): the fields Opensense syncs by default.