How to Sync the Active Directory employeeType Attribute to Microsoft Entra ID
Question details
Add the on-premises Active Directory employeeType attribute to Microsoft Entra ID because it is not included in the default Azure AD Connect synchronization configuration.
- Product
- Microsoft Entra ID / Azure AD Connect
- Device & OS
- not provided
- Scenario
- An administrator needs to synchronize the Active Directory employeeType attribute to Microsoft Entra ID and Microsoft 365.
- Observed behavior
- employeeType is not synchronized by default and must be added through custom attribute synchronization.
Confirm that you have Hybrid Identity Administrator or Global Administrator access in Microsoft Entra ID and local administrator access to the Azure AD Connect server. Also verify that employeeType is populated on the relevant Active Directory user accounts.
Add employeeType with Azure AD Connect Directory Extension Attribute Sync
Use this method when employeeType is missing from the default Azure AD Connect rule set and you need to sync it to Microsoft Entra ID.
Directory Extension attribute sync is the supported way to include on-premises attributes that are not part of the default Azure AD Connect synchronization rules. After synchronization, employeeType is written to a Microsoft Entra extension attribute on the user object.
On the Azure AD Connect server, launch Microsoft Azure Active Directory Connect, select Configure, choose Customize synchronization options, and click Next.
On the Optional features page, select Directory extension attribute sync, complete authentication, and click Next.
On the Directory extensions page, select employeeType from the available Active Directory attributes, assign a Microsoft Entra extension attribute such as extensionAttribute1, and click Next.
Complete the wizard, run Start-ADSyncSyncCycle -PolicyType Delta on the Azure AD Connect server, then check the Microsoft Entra user object for the populated extension attribute.
Verify the employeeType value in Microsoft Entra ID and use it in policies
Use this after synchronization to confirm that the value was written correctly and to reference it in Microsoft Entra admin center.
Managing Microsoft Entra ID? Use WPS Office as Your Free Microsoft Office Alternative
WPS Office does not replace Microsoft Entra ID or Azure AD Connect directory synchronization, but it can open, edit, and save Microsoft Word, Excel, and PowerPoint files for admins and end users free of charge. Its familiar ribbon interface and strong Microsoft Office format compatibility make it a practical companion while working in Microsoft 365 environments.
Frequently Asked Questions
Why is the employeeType attribute missing from Microsoft Entra ID after a default Azure AD Connect sync?
employeeType is not part of the default Azure AD Connect synchronization rule set. You must add it manually through Directory Extension attribute sync during a custom Azure AD Connect configuration.
Which Azure AD Connect option should I select to sync employeeType?
Select Customize synchronization options in the Azure AD Connect configuration wizard, enable Directory extension attribute sync, and then choose employeeType from the available Active Directory attributes.
What attribute name does employeeType get in Microsoft Entra ID after directory extension sync?
It is written to a Microsoft Entra extension attribute that you select during configuration, commonly extensionAttribute1. You can then use that extension attribute for dynamic groups, lifecycle workflows, or provisioning.
Do I need to run a full sync after adding the employeeType directory extension?
A delta sync is usually sufficient. Run Start-ADSyncSyncCycle -PolicyType Delta on the Azure AD Connect server, then verify the value on a user object in Microsoft Entra admin center.
Can WPS Office sync Active Directory attributes to Microsoft Entra ID?
No. WPS Office is an office suite alternative and does not manage Active Directory or Microsoft Entra ID synchronization. Directory attribute sync must be configured in Azure AD Connect.
