A cloud-based identity and access management service for securing user authentication and resource access
SCIM provisioning – addresses[type=home] values not persisted by Entra ID
Hello Microsoft Support team,
I’m running into an issue with SCIM provisioning in Microsoft Entra ID and would appreciate your help clarifying whether this is expected behavior or a configuration problem on our side.
Setup overview:
- Microsoft Entra ID provisioning
Agent-based SCIM connector
Custom SCIM endpoint
User updates via POST /Users and PATCH /Users (the issue occurs with both)
What we’re seeing:
Provisioning runs successfully and the user is updated. In the Entra provisioning logs, under “Modified attributes (successful)”, the following attributes appear:
addresses[type eq "work"]
-
addresses[type eq "home"](multiple sub-attributes such as formatted, region, postalCode, country, etc.)
Our SCIM endpoint returns the full User object, including both the work and home address entries with valid values.
However, in the provisioning logs:
For addresses[type=work], Entra correctly shows both the original and modified target attribute values.
For addresses[type=home], Entra treats the attribute as empty:
“Original target attribute” is empty
On every provisioning cycle it behaves as if the value was never stored
In other words, Entra seems to persist/cache the work address, but not the home address, even though both are present in the SCIM response payload.
This behavior is consistent when using both POST (initial provisioning) and PATCH (updates).
Questions:
Is there any documented limitation where Entra only tracks certain addresses[type] values (for example work) for SCIM provisioning state?
Are only specific enum values for addresses.type supported or expected by Entra?
Is it known behavior that only the first address entry in the array is persisted?
Is any special schema extension or attribute mapping required to make addresses[type=home] persist correctly?
Or would this be considered a bug?
Below is the anonymized SCIM User response returned by our endpoint for reference. I have also attached a screenshot of the Entra provisioning log showing the empty “Original target attribute” for addresses[type=home].
Best regards,
Kahal
Screenshot from Entra provisoning:
Anonymized SCIM response JSON:
{
"schemas": ["urn:ietf:params:scim:schemas:core:2.0:User"],
"id": "redacted",
"meta": {
"resourceType": "User",
"lastModified": "2026-01-23T14:55:01.425570Z",
"location": "/scim/v2/Users/redacted",
"version": "W/\"d7bd22b0\""
},
"userName": "john.doe@example.com",
"name": {
"familyName": "redacted",
"givenName": "redacted"
},
"displayName": "redacted",
"nickName": "redacted",
"title": "redacted",
"userType": "redacted",
"preferredLanguage": "redacted",
"timezone": "redacted",
"active": true,
"addresses": [
{
"formatted": "redacted",
"streetAddress": "redacted",
"locality": "redacted",
"region": "redacted",
"postalCode": "redacted",
"country": "redacted",
"type": "work"
},
{
"formatted": "redacted",
"region": "redacted",
"postalCode": "redacted",
"country": "redacted",
"type": "home"
}
]
}