Azure AD User Table Provisioning - "Manager" field.

[smithro]

Is anyone using Azure AD to do their user table provisioning/updating ?  For security reasons, we are trying to get off our LDAP VPN tunnel connection to AD, and use Azure AD which we are already using for SSO.

We are unable to provision the user's manager name.  It is not coming over from Azure.  I've read some other posts about this being an issue, but all were dead ends.  It really shouldn't be this difficult.

Can anyone share their method for getting their manager's name populated from Azure?

[Ryan Duce]

From your Entra ID application for ServiceNow (which you should have downloaded from the gallery), click "Edit attribute mappings". You can add the manager as a mapped attribute. See attached screenshots.

[smithro]

Hi Ryan....i'm not seeing manager on your screenshot.  I believe the issue is related to writing to a reference field.  The other fields are strings and pass without issue.

[Ryan Duce]

Scroll to the bottom of the list and click "Add new mapping". The manager mapping should look like this.

[StuartD]

Hi @Ryan Duce  - I have set up the manager mapping exactly as you indicate.  But when trying to provision on demand for a given user, the manager mapping is skipped with an error "UnableToResolveReferenceAttributeValue".  Entra seems to want to use the ObjectId as the string to push into the manager field in the user record on ServiceNow, which will clearly never work as that field is a reference data type and is expecting the ServiceNow sys id for the manager.  Can you confirm that you actually got this working?