Get Entra ID / Azure AD properties for a group ...

Question

Hello -

I'm looking for some guidance / clarity.

I'm running Adaxes 2023 (I know I need to update) and I have a very specific task I am trying to accomplish.

I am in hybrid-mode - so we have an on-premise AD that syncs to Entra ID (Azure AD).

My on-prem AD is managed and I have the M365 tenant configured under 'Cloud Services'.

I need to retrieve the Entra ID object ID for a subset of the groups in my domain.

I've been reading the online docs for hours now and I am a little lost.

If I understand correctly, it says I should be able to use the Adaxes powershell command 'get-AdmGroup' to retrieve the Entra ID object ID ... but I can't figure it out.

I've looked at the '-AdaxesService' command along with using my organization's '.onmicrosoft.com' domain name in the 'serverName' parameter, but I get an error saying that it is 'unavailable'.

I want to get the information in the easiest and most efficient manner ... and I thought it would be much easier with Adaxes.

I feel as if I am missing something here. Any and all help / direction is much appreciated (in advance).

Thanks.

Answer 1

Hello,

To obtain the identifier, you can use the below script in a custom command, business rule or scheduled task. Pay attention that it will only work on users included into the associated scope of your tenant in Adaxes.

try
{
    # Get the object ID in Microsoft 365.
    $objectId = [Guid]$Context.TargetObject.Get("adm-AzureId")
}
catch
{
    return
}

Comments

Thank you for the quick response.

I've tried what you suggested and am so far not being successful. I added a couple of Log statements and captured the error and this is what I am receiving.

I've obfuscated a lot, but I can verify that the group I am trying to get this information on is under the 'associated objects' of my tenant.

Can I please get some additional guidance or thoughts on this situation?

Thank you again.

---

Hello,

The behavior is expected as the property is empty for the object you run the script against. It can only be retrieved for users who are licensed for Microsoft 365 or groups that are mail-enabled in Exchange Online. Also, there were some changes introduced by Microsoft and only applied in Adaxes 2023 Update 2 (build number 3.15.23410). If you are using an older version, you need to upgrade to use the script.

Upgrade instructions

What's New 2023