Cloud Identity Engine Attributes (Active Directory)

Table of Contents

Learn about On-Premise Active Directory attributes.

You can collect the following types of default attributes and their associated On-Premise Active Directory fields:

User Attributes

Directory Sync Attribute	Directory Field
Admin Count	adminCount
Common-Name	cn
CompanyName	companyName
Country	co
Department	department
Distinguished Name	dn
Groups	memberOf
Last Login	lastLogon
LastLogonTime	lastLogonTimestamp
Location	l
MSDSAllowedDelegatedTo	msDS-AllowedToDelegateTo
MSDSAllowedToActOnBehalfOfOtherIdentity	msDS-AllowedToActOnBehalfOfOtherIdentity
MSDSSupportedEncryptionTypes	msDS-SupportedEncryptionTypes
Mail If you do not configure a value for the Mail attribute, the Cloud Identity Engine uses the value of the User Principal Name.	mail
Manager	manager
NETBIOS Name	nETBIOSName
Name	displayName
Object Class	objectClass
Primary Group ID	primaryGroupID
SAM Account Name	sAMAccountName
SID	objectSid
SID History	sIDHistory
Service Principal Name	servicePrincipalName
Title	title
Unique Identifier	objectGUID
User Principal Name	userPrincipalName
UserAccountControl	userAccountControl
WhenChanged	whenChanged
WhenCreated	whenCreated

Directory Sync Attribute	Directory Field
Admin Count	adminCount
Common-Name	cn
Distinguished Name	dn
Groups	memberOf
HostID	_hostId
Host Name	dNSHostName
Last Login	lastLogon
LastActiveDaysAgo	lastActiveDaysAgo
LastLogonTime	lastLogonTimestamp
MSDSAllowedDelegatedTo	msDS-AllowedToDelegateTo
MSDSAllowedToActOnBehalfOfOtherIdentity	msDS-AllowedToActOnBehalfOfOtherIdentity
MSDSSupportedEncryptionTypes	msDS-SupportedEncryptionTypes
NETBIOS Name	nETBIOSName
Name	displayName
OS	operatingSystem
OSServicePack	operatingSystemServicePack
OSVersion	operatingSystemVersion
Object Class	objectClass
Primary Group ID	primaryGroupID
SAM Account Name	sAMAccountName
SID	objectSid
SID History	sIDHistory
Serial Number	serialNumber
Service Principal Name	servicePrincipalName
Unique Identifier	objectGUID
User Principal Name	userPrincipalName
UserAccountControl	userAccountControl
WhenChanged	whenChanged
WhenCreated	whenCreated