Custom Security Attributes enable storage of sensitive information on user and application objects in Azure Active Directory.
Attributes
Each attribute consists of the following: the name of the attribute, the name of attribute set that contains the attribute, the data type of the attribute, and the value of the attribute. The name of the attribute, the containing attribute set, and the data type cannot be changed once the attribute has been created. The value of the attribute can be changed by authorized users.
Attribute Sets
Each attribute set consists of the following: the name of the attribute set and the attributes contained within the set. The name of the attribute set cannot be changed once the attribute set has been created. The list of attributes in the set can be expanded by creating new attribute. Existing attributes in set cannot be removed.
Naming Conventions
The following naming conventions are proposed for Custom Security Attributes to ensure that attributes and attribute sets can be re-used.
- The name of each attribute set will include the tenant name followed by the static Csa identifier followed by the object type for the attributes in the set and a sequential numeric identifier within the set of attribute sets that are of the same object type.
- utexasCsaUser1, utexasCsaUser2, utexasCsaApp1, utexasCsaApp2
- The name of each attribute will include the name of the attribute set that contains the attribute followed by the data type and a sequential numeric identifier within the set of attributes in set that are of the same data type.
- utexasCsaUser1Single1, utexasCsaApp1Bool1