User Attributes give you another powerful, user-centric way to manage devices that can cut down on admin time and simplify workflows. Once an end user signs into their identity provider account, data returned from the provider becomes available in Addigy as device facts — things like Employee Department, Hire Date, or Employee Type are useful for automating Addigy in response to changes in your organization.
Prerequisites
- Addigy Identity is configured as outlined in the Entra setup guide.
How to Enable User Attributes for Entra
- In the policy's Addigy Identity configuration, enable Collect User Attribute Data.
- Scroll to the bottom of the page and click Save Changes.
Note: Nothing needs to be enabled or configured within Entra itself for this feature to function.
Supported Attributes
The table below lists each supported attribute's name, mapping value, and meaning.
| Addigy Attribute Name | Attribute Mapping Value | Attribute Meaning |
|---|---|---|
| Identity Email | mail |
Email address for the user; for example: ["j@companyname.com"]. This property cannot contain accent characters. |
| Identity Employee Department | department |
The name of the department in which the user works. |
| Identity Employee Hire Date | employeeHireDate |
The date and time when the user was hired, or will start work in the case of a future hire. |
| Identity Employee Type | employeeType |
Captures enterprise worker type — for example, Employee, Contractor, Consultant, or Vendor. |
| Identity Mobile Phone | mobilePhone |
The primary cellular telephone number for the user. |
| Identity Provider Name | entra, google, okta | The name of the Identity Provider. |
| Identity User Display Name | displayName |
The name displayed in the directory for the user — usually the combination of the user's first and middle initial and last names. Required when a user is created, and cannot be cleared during updates. |
| Identity Username | userPrincipalName |
An Internet-style login name for the user, based on the Internet standard RFC 822. By convention, this should map to the user's email name, in the format alias@domain, where the domain is present in the tenant's collection of verified domains. Required when a user is created. |
| Identity Usage Location | usageLocation |
A two-letter country code (ISO standard 3166) — for example, US, JP, or GB. |
| Identity Office Location | officeLocation |
The office location in the user's place of business. |
| Identity Password Set Date | lastPasswordChangeDateTime |
The time this Entra AD user last changed their password, or when their password was created, whichever occurred most recently. |
Frequently Asked Questions
How often does this data refresh?
User Attributes refresh every time the end user successfully signs in.
What should I do with these attributes?
Use User Attributes to automatically filter devices with flex policies.
Does this feature cost extra?
No, there's no additional cost for this feature.
Where do I see these populated fields?
One device: GoLive > Overview. Search for "Identity."
Multiple devices: Go to the Devices page, click Columns, search for "Identity," then select the attributes you want to see.
If I don't have this feature enabled, does Addigy still collect user data?
No. User information is only collected if the Collect User Attributes setting is enabled.
Why do some of my device facts show N/A?
This usually means the end user still needs to sign in successfully, the corresponding field is blank in the Identity Provider's directory, or the feature isn't enabled or configured correctly.
How do I update the data that appears in Entra?
See Microsoft's directions for updating a user's profile data.
Is there more information from Microsoft on these mapping values?
Yes — see the User resource type properties and Group resource type properties in Microsoft Graph's documentation.