AAD中的自定义属性/属性..在MS图形中找到它们

本文介绍了AAD中的自定义属性/属性..在MS图形中找到它们的处理方法，对大家解决问题具有一定的参考价值，需要的朋友们下面随着小编来一起学习吧！ 问题描述

我有一个大型AAD动态组，我需要搜索和查询其成员资格(超过10万个成员组)，并按名称搜索用户.该组是基于AAD中用户的自定义属性生成的.

I have large AAD Dynamic group that I need to search and query membership for (100K+ member group) and search for users by name. This group is generated based on a custom attribute on the user in AAD.

我正在尝试确定是否可以从MS图表中获取此信息，或者是否需要将这些调用移至AAD图表?

I am trying to figure out if I can get this information out the MS Graph or if I need to move these calls to the AAD Graph ?

我已经检查了用户的扩展名和架构数据，但似乎没有任何东西.

I've checked the users for extensions and schema data but there doesn't seem to be anything there.

自定义属性是否无法在MS Graph中复制?

Are custom attributes not replicated in MS Graph?

我要解决的问题是:

我有一个人员选择器，我想返回满足该组成员身份的结果.问题是MS Graph不支持在其displayName上的组成员的OData查询.由于该组是通过自定义属性来驱动的，因此我希望可以做一个捷径并将其包含在我的查询中

I have a people picker that I want to return results that satisfy membership of a this group. The problem is MS Graph doesn't support OData queries of the members of a group on their displayName. Since the group is driving by the custom attribute I was hoping to take a short cut and include that in my query

推荐答案

您可能需要使用AAD Graph(而不是MS Graph)获取自定义属性，似乎MS Graph不会返回该自定义属性.

You may need to get the custom attribute with AAD Graph instead of MS Graph, seems the MS Graph will not return the custom attribute.

AAD图样本:

GET graph.windows/{tenant}/users/{objectId}

返回:

{ "odata.metadata": "graph.windows/{tenant}/$metadata#directoryObjects/Microsoft.DirectoryServices.User/@Element", "odata.type": "Microsoft.DirectoryServices.User", "objectType": "User", ... "extension_917ef9adff534c858b0a683b6e6ec0f3_CreatedTime": 1518602039 }

这里有两个与此问题相关的帖子，请参见:如何在ASP.NET MVC中获取/设置自定义Azure Active Directory B2C用户属性?和如何使用Graph API读取Azure B2C自定义属性(适用于Azure广告图)

Here are two posts related to this issue, see : How to get/set custom Azure Active Directory B2C user attributes in ASP.NET MVC? and How to read Azure B2C Custom Attributes with Graph API (works OK with Azure AD Graph)