User profile synchronization
Microsoft SharePoint uses the Active Directory synchronization job to import user and group attribute information into the User Profile Application (UPA). When a new user is added to Microsoft Entra ID, the user account information is sent to the SharePoint directory store and the UPA sync process creates a profile in the User Profile Application based on a predetermined set of attributes. Once the profile has been created, any modifications to these attributes will be synced as part of regularly scheduled sync process.
Note
The profile properties that are synced by the UPA sync process are not configurable. Synchronization times will vary based on workloads.
Sync process
There are four steps in the sync process.
| Step | Description |
|---|---|
| 1. Active Directory to Microsoft Entra ID | Microsoft Entra Connect syncs data from on-premises Active Directory to Microsoft Entra ID. For more info, see What is hybrid identity with Microsoft Entra ID? and Attributes synchronized. |
| 2. Microsoft Entra ID to SharePoint | Microsoft Entra ID syncs data from Microsoft Entra ID to the SharePoint directory store. |
| 3. SharePoint to UPA | The UPA sync process syncs user account information in SharePoint directory store to the User Profile Application (UPA). |
| 4. UPA to sites | User account information from the UPA is synced to SharePoint sites (previously called "site collections"). |
Typically, user profiles are created automatically for all accounts that are created in Microsoft 365. For organizations that have a Microsoft 365 Education subscription, user profiles are not created for new accounts by default. The user must access SharePoint once, at which time a basic stub profile will be created for the user account. The stub profile will be updated with all remaining data as part of the sync process.
If block sign-in is set on the user account in Microsoft Entra ID or disabled accounts are synced from Active Directory on premises, those user accounts will not be processed as part of the UPA sync process. The user must be enabled and licensed for changes to be processed.
Properties that are synced into SharePoint user profiles
The following Microsoft Entra user attributes are synced to the UPA.
| Microsoft Entra attribute | User profile property display names | Notes | Sync to sites |
|---|---|---|---|
| UserPrincipalName | Account Name User Name User Principal Name |
Example: i:0#.f <|> membership <|> [email protected] [email protected] |
Yes |
| DisplayName | Name | Yes | |
| GivenName | FirstName | Yes | |
| sn | LastName | Yes | |
| telephoneNumber | Work phone | Example: (123) 456-7890 | Yes |
| proxyAddresses | Work Email SIP Address |
Work Email is set to the value prefixed with SMTP. (SMTP:[email protected]) Example: [email protected] |
Yes |
| PhysicalDeliveryOfficeName | Office | Yes | |
| Title | Title Job Title |
Job Title contains the same value as Title and is connected to a term set. | Yes |
| Department | Department | Department is connected to a term set. | Yes |
| WWWHomePage | Public site redirect | No | |
| PreferredLanguage | Language Preferences | Used by SharePoint to determine language for the user when the multilingual user interface (MUI) feature is enabled. | Yes |
| msExchHideFromAddressList | SPS-HideFromAddressLists | No | |
| Manager | Manager | User Manager for organization hierarchy | Yes |
Note
To update additional or custom properties, see Bulk update custom user profile properties. Some property names could differ between Azure AD Graph and Microsoft Graph, see Property differences between Azure AD Graph and Microsoft Graph.
Frequently asked questions (FAQs)
How often are changes synced into the User Profile Application?
User account attribute changes are collected in batches and processed for UPA synchronization. Times will vary based on the amount of changes requested in a single batch. The UPA synchronization is schedule to run at regular intervals.
Will UPA synchronization overwrite existing properties in SharePoint user profiles?
For the default properties that are synced by UPA synchronization, values will be overwritten to align with Microsoft Entra ID.
Does UPA synchronization update only properties that have changed?
UPA synchronization is driven primarily by changes that are made Microsoft Entra ID, including adding new users. A full import can occur under certain maintenance events.
Why isn't it possible to map additional properties for UPA synchronization to sync from Microsoft Entra ID to the User Profile Application?
UPA synchronization is limited to a preconfigured set of properties to guarantee consistent performance across the service.