Teamflect can sync custom security attributes from Microsoft Entra ID into user profiles. Once configured, these attributes can be used to enrich profiles and support filtering and reporting without requiring admins to maintain the same information manually in Teamflect.
Before you start
Your IT team must first grant Teamflect permission to read custom security attributes from Microsoft Entra ID.
If this permission has not been configured yet, send your IT administrator the following guide: How to Provide Permission to Sync with Custom Security Attributes in Entra ID
The IT setup requires Microsoft Graph permissions and administrative access in your Microsoft Entra environment.
How to configure a synced attribute
Step 1: Access Your Admin Center
Begin by logging into your Teamflect account and navigating to the Admin Center (https://admin.teamflect.com), the central hub for administrative functions.
Step 2: Locate User Attributes Section
Within the Admin Center interface, locate and access the "User Attributes" section. This section serves as the primary area for managing user attribute settings.
Step 3: Create New Attribute
Click on the "Create new attribute" option to initiate the attribute creation process. This action opens up the attribute configuration interface.
Step 4: Provide Attribute Details
Fill out the required details for the new attribute, including the label, description, and any other relevant information to accurately define its purpose and usage.
Step 5: Specify Data Source
Choose "Sync from Microsoft Entra ID" as the data source for the attribute. This selection establishes the link between Teamflect and your Microsoft Entra ID account for custom security attribute synchronization.
Step 6: Select Attribute for Syncing
From the available options, select the specific attribute from your Microsoft Entra ID account that you intend to synchronize with Teamflect. Ensure alignment with your organizational requirements.
Step 7: Customize Attribute Settings
Customize additional attribute settings as needed, such as defining visibility in user profiles and selecting an appropriate icon to represent the attribute for enhanced visual identification.
Step 8: Finalize Configuration
Review the configured settings to ensure accuracy and alignment with your objectives. Once satisfied, proceed to submit the attribute configuration for implementation.
Step 9: Verification and Validation
Verify the successful synchronization by navigating to the "active users" section within the Admin Center. Confirm that the custom security attribute accurately reflects for users, validating the seamless integration between Microsoft Entra ID and Teamflect.
By following these structured steps, you've successfully established a seamless connection between your custom attribute in Microsoft Entra ID and Teamflect. This integration streamlines user attribute management, promoting efficiency, data automation, and accuracy within your administrative workflows.
📌Note: If you'd like to see an overview of the User Attributes in Teamflect, please check out this resource here.
How Synchronization Works
When an attribute uses Sync from Microsoft Entra ID as its data source, Entra ID is the source of truth for the attribute's value. Teamflect automatically syncs the value into the corresponding user profile, so changes should be made in Entra ID rather than manually in Teamflect.
A synced attribute is read-only in Teamflect. If the value changes in Entra ID, the Teamflect value is updated by the sync rather than being maintained as a separate manual value.
Important: If you need an attribute to be maintained manually in Teamflect, use Manual Input as its data source instead. Manual-input attributes can be edited in Teamflect and are not overwritten by Microsoft 365/Entra synchronization.
Configure who can see the attribute
The visibility setting controls who can see the attribute on user profiles. Teamflect currently provides these options:
Visibility option | Who can see the attribute? |
Everyone | The employee, their manager(s), colleagues/other users, and Teamflect administrators |
User, manager, and Teamflect administrator | The employee, their manager(s), and Teamflect administrators |
Managers and Teamflect administrators | The employee's manager(s) and Teamflect administrators; the employee cannot see it |
Teamflect administrators | Teamflect administrators only |
Not visible | Teamflect administrators only; the attribute is hidden from other users |
Global administrators have visibility into user attributes. For scoped administrators, access is limited by their configured administrative scope where applicable.
Choosing the right visibility
For example, if you sync an attribute such as Employee Type or Region:
Choose Visible to everyone if employees and colleagues can see the information.
Choose Visible only to user, manager, and Teamflect administrator if it is useful to the employee and their management chain but shouldn't be broadly visible.
Choose Visible only to manager and Teamflect administrators for manager-facing information that employees shouldn't see.
Choose an admin-only option for sensitive HR information.
Visibility affects what people see on profiles; it does not prevent the attribute from being used for administrative functions such as filtering or reporting where the user's role has access.
Verify the sync
After configuring the attribute, go to Users → Active Users and check a user's profile. The synced attribute should display the value currently available from Entra ID. If the value is missing or does not update, first confirm that:
The attribute exists in Microsoft Entra ID.
Teamflect has the required Microsoft Graph permissions.
The correct Entra attribute was selected when the Teamflect attribute was created.
The user has a value populated for that attribute in Entra ID.
Beneficial Use Cases
1. Enriched User Profiles
By syncing custom security attributes (e.g., department code, employee type, region) from Microsoft Entra ID, admins can enhance user profiles in Teamflect so that managers and dashboards show more relevant context.
2. More Granular Reporting
Custom attributes let you filter and segment reports based on organizational details stored in Entra ID. For example, you could generate reports for specific regions, roles, or divisions without needing manual tagging.
3. Automated Attribute Maintenance
Instead of manually updating user details in Teamflect, sync ensures the attributes stay up‑to‑date with the source of truth in Entra ID, reducing errors and administrative effort.
For further assistance or inquiries, our dedicated support team is readily available to provide guidance and address any queries you may have. Contact them at [email protected].