How can I configure admin editable custom user attributes in Entra so they show on the user profile UI and can be sent via SCIM?

Nikita Cheretun 0

Hi everyone,

Main Goal: I want to add custom attributes for users in Microsoft Entra that:

Are visible and editable in the Entra Admin Center on the user’s profile blade (so admins can fill them in without Graph/PowerShell), and
Can be used as source attributes in Provisioning -> Attribute mappings to send them via SCIM to a downstream app (Auth0).

What I’ve tried:

onPremisesExtensionAttributes (extensionAttribute1..15): I can use them as SCIM sources, but they’re generally not editable in the user UI.
Directory schema extensions (extension_{AppId}_{Attr}): great for SCIM sources, but created/edited via Graph API. They don’t appear as editable fields on the user profile blade.

Any other options ? Thanks in advance.

Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-10-31T09:50:25.3266667+00:00

Hello Nikita Cheretun,

Currently, directory schema extensions function well for SCIM but can only be controlled through the Microsoft Graph API and do not show up as editable fields in the Admin Center. On the other hand, onPremisesExtensionAttributes can be used in SCIM mappings but cannot be edited in the user interface.

Unfortunately, Microsoft Entra ID does not currently allow for the creation of custom properties that satisfy the two conditions of being useful for SCIM mappings and modifiable in the Admin Center. You can continue to provision or maintain editable fields outside and synchronize them via API by employing schema extensions controlled by the Graph API.

Let me know if any further queries - feel free to reach out!
Rukmini 43,915 Reputation points Microsoft External Staff Moderator

2025-11-03T09:56:40.6+00:00

Hello Nikita Cheretun,

Following up to see if the above provided information was helpful. If you have any further queries do let us know.
Priyanshu Kumar 0 Reputation points

2025-11-03T11:10:20.09+00:00

Hi Rukmini,I have a similar problem where I want a Custom user attribute (serialNumber extension attribute) to provision to target application, but the attribute value is not being passed by. Insted just "System.Object[]" is being passed for every user.

Would you be able to help me with this?

Your answer