Use Azure AD UPN as Email

[Ajay Furber]

Hi,

I have a strange setup when it comes to email and cloud authentication and this is currently causing me some problems with Crowd. Currently I use Azure AD to provision my accounts, add to groups etc and sync to crowd. My actual email is handled by Google Apps with is automatically provisioned by AzureAD when a new user is created.

This therefore means that Azure AD has no email attribute for any user (although their AzureAD UPN does match their primary email in Google Apps) and this therefore means that Crowd does not have any knowledge of the user's email.

Is there any way now to tell crowd to use the UPN as the users email rather than pull the default email attribute from Azure AD? Currently users can't receive any email as their profiles have no values assigned. 

Thanks

Ajay

[Bruno Vincent · Accepted solution]

Hi @Ajay Furber 

As per Atlassian's documentation, Crowd's email attribute is mapped with Azure AD 'mail' attribute. The problem is that only Azure AD users with an Exchange Online mailbox have a 'mail' attribute.

You might want to take a look at the ODCC add-on which allows to use Azure AD 'mailNickname' attribute (which is always provisioned) concatenated to the '@' character plus the value of your domain name.

(Disclaimer: I work for the vendor of the ODCC add-on)