SDS Troubleshooting

Troubleshoot attribute mappings and values

When enabling Sync, students and teachers require a matching attribute between the source and target directories, in order to correlate the user objects between both directories. The instructions below contain the step by step instructions for checking the Source and Target attributes for students and teachers, detailed by sync method.

Check the source directory - CSV files

When configuring SDS sync with CSV files as the source directory, the three attributes listed below are available in the CSVs for matching the attribute of the user object in Azure AD.

  • Username Username is the header field in the Student and Teacher csv file, and can be formatted to match any of the available target directory options (UserPrincipalName, mailNickname, or Mail). To check the value of this attribute, check the student or teacher csv that contains the user.

  • Student Number/Teacher Number Student Number is the header field in the Student csv file, and Teacher Number is the header field in the Teacher csv file. The appropriate formatting for this attribute is a simple string of alpha numeric characters with no spaces, and it can provide a direct match to the mailNickname attribute of a user in Azure AD. You can also append this source attribute with a domain suffix,in order to match the UserPrincipalName or Mail attribute in Azure AD. To check the value of this attribute, check the student or teacher csv that contains the user.

  • Secondary Email Secondary Email is the header field in the Student or Teacher csv file, and can only be formatted to match the UserPrincipalName or Mail attribute in Azure AD. It requires the domain suffix be included in the value contained within the CSV file. To check the value of this attribute, check the student or teacher csv that contains the user.

Check the source directory - PowerSchool

When configuring SDS sync with PowerSchool as the source directory, the 3 attributes listed below are available in PowerSchool for matching the attribute of the user object in Azure AD.

Username This attribute in PowerSchool is called Student Username or Teacher Username. To check the value of this attribute for a student or teacher in PowerSchool, follow the steps below:

  1. Log into PowerSchool as an administrator.

  2. In the PowerSchool portal, select the Student tab for students or the Staff tab for teachers.

  3. Search for the user. Once found, click on the user.

  • If Student, in the left pane under the Information section, select Access Accounts. The Username for students in PowerSchool is called Student Username.

  • If Teacher, in the left pane under the Functions section, select Security Settings. The Username for teachers in PowerSchool is called Teacher Username.

Student Number/Teacher Number This attribute in PowerSchool is called Student Number for students, and ID for teachers. To check the value of this attribute for a student or teacher in PowerSchool, follow the steps below:

  1. Log into PowerSchool as an administrator.

  2. In the PowerSchool portal, select the Student tab for students or the Staff tab for teachers.

  3. Search for the user. Once found, click on the user.

  • If Student, the Student Number is displayed on the main search page before you click on the user. The Student Number in PowerSchool is called Student Number.

  • If Teacher, in the left pane under the Functions section, select Information. The Teacher Number in PowerSchool is called ID.

Secondary Email This attribute in Clever is called email for students and teachers. To check the value of this attribute for a student or teacher in Clever, follow the steps below:

  1. Log into PowerSchool as an administrator.

  2. In the PowerSchool portal, select the Student tab for students or the Staff tab for teachers.

  3. Search for the user. Once found, click on the user.

  • If Student, in the left pane under the Information section, select Student Email. The secondary Email for students in PowerSchool is called Email Address.

  • If Teacher, in the left pane under the Functions section, select Information. The secondary Email for teachers in PowerSchool is called Email Address.

Check the target directory - Azure AD

When configuring SDS sync, the target directory is always Azure Active Directory. The three attributes listed below are available for matching the attribute of the user object in source directory.

UserPrincipalName

Check UserPrincipalName through the Office 365 admin center

  1. Launch Internet Explorer in a Private Browser.

  2. Navigate to portal.office.com.

  3. Log into the Office 365 admin center with a Global Admin Account.

  4. Navigate to the Admin tile > Users tab > Active Users.

  5. Search for the user you want to check.

  6. Click on the user.

Note the UserPrincipalName listed in the Heading field.

Check UserPrincipalName through PowerShell

  1. Launch PowerShell as an Administrator with the Azure AD Module for PowerShell imported.
Import-Module msonline
  1. Run the command below to connect to Azure AD. Enter Global Admin credentials when prompted.
$Cred = Get-Credential
Connect-MsolService -credential $cred
  1. Once connected, run the command below to check the UserPrincipalName of a single user. An example is shown where the user's name is Boyd Cowley.
Get-MsolUser -SearchString "<Display Name>" | FL UserPrincipalName
Ex. Get-MsolUser -SearchString "Boyd Cowley" | FL UserPrincipalName

> [!note] > The Search String parameter will search for the User you are looking for and only users with an email address or display name starting with this string will be returned. For more information about the Get-MsolUser cmdlet, see [https://msdn.microsoft.com/en-us/library/dn194133.aspx](https://msdn.microsoft.com/en-us/library/dn194133.aspx).

Mail (primarysmtpaddress)

Check Mail (primarysmtpaddress) through the Office 365 admin center

  1. Launch Internet Explorer in a Private Browser.

  2. Navigate to portal.office.com.

  3. Log into the Office 365 admin center with a Global Admin Account.

  4. Navigate to the Admin tile > Users tab > Active Users.

  5. Search for the user you want to check.

  6. Click on the user.

  7. Select Edit Exchange Properties in the More Settings section.

  8. Select email address.

The mail attribute will be noted with a capital SMTP for the type, and also be listed in bold.

Check Mail (primarysmtpaddress) through PowerShell

  1. Launch PowerShell as an Administrator with the Azure AD Module for PowerShell imported.
Import-Module msonline
  1. Run the command below to connect to Azure AD. Enter Global Admin credentials when prompted.
$Cred = Get-Credential
Connect-MsolService -credential $cred
  1. Once connected, run the command below to check the Mail attribute of a single user. An example is shown where the user's name is Boyd Cowley.
Get-MsolUser -SearchString "<Display Name>" | FL proxyaddresses
Ex. Get-MsolUser -SearchString "Boyd Cowley" | FL proxyaddresses
  1. Proxyaddresses is a multi-valued attribute, and may contain multiple entries. The address with a capital SMTP is the primarysmtpaddress for the user, and is the Mail attribute in Azure AD.

Note

The Search String parameter will search for the User you are looking for and only users with an email address or display name starting with this string will be returned. For more information about the Get-MsolUser cmdlet, see https://msdn.microsoft.com/en-us/library/dn194133.aspx.

mailNickname (Alias)

Check mailNickname (Alias) through the Office 365 admin center

  1. Launch Internet Explorer in a Private Browser.

  2. Navigate to portal.office.com.

  3. Log into the Office 365 admin center with a Global Admin Account.

  4. Navigate to the Admin tile > Users tab > Active Users.

  5. Search for the user you want to check.

  6. Click on the user.

  7. Select Edit Exchange Properties in the More Settings section.

  8. Select General.

The mailnickname (*Alias) attribute will be shown below displayname.

Check mailNickname (Alias) through PowerShell

  1. Launch PowerShell as an Administrator with the Azure AD Module for PowerShell imported.
Import-Module msonline
  1. Run the command below to connect to Azure AD and Exchange Online. Enter Global Admin credentials when prompted.
$Cred = Get-Credential
$Session = New-PSSession -ConfigurationName Microsoft.Exchange -ConnectionUri https://ps.outlook.com/powershell/ -Credential $Cred -Authentication Basic -AllowRedirection
Import-PSSession $Session
Connect-MsolService -credential $cred
  1. Once connected, run the command below to check the Mail attribute of a single user.
Get-MsolUser -SearchString "<Display Name>" | FL proxyaddresses
  1. Proxyaddresses is a multi-valued attribute, and may contain multiple entries. The address with a capital SMTP is the primarysmtpaddress for the user, and is the Mail attribute in Azure AD.

  2. Run the line below to pull the alias value of the user

Get-Recipient <primarysmtpaddress> | FL Alias

Note

The Search String parameter will search for the User you are looking for and only users with an email address or display name starting with this string will be returned. For more information about the Get-MsolUser cmdlet, see https://msdn.microsoft.com/en-us/library/dn194133.aspx.