SCA Configuration - AAD filters

SecContacts.AADFilters

This setting is for customizing the querying parameters for AZURE AD contacts.

Secure Contacs App is querying AZURE AD via directory.read.all and will use any AAD account as contact which contains at least an displayname and a bussiness or mobile phonenumber.

Per default it ignores all "external AAD" accounts which have a UPN containing "#EXT#@" as well as the administrator account.

This is basically an "all in" with some default exceptions. With AADFilters you can extend these exceptions.

• Name: SecContacts.AADFilters

• Value: [{"property":"<aad-property>", "operator":"<target-operator>", "value":"<target-value>"}]

The Value property is a JSON Array of property operator value trio. You can add one or multiple filter here.

Replace <aad-property> with the AAD property you want to for filter for

• e.g. userPrincipalName or displayName

Replace <target-operator> with an operator

• e.g. contains or equals or equalsAny

Replace <target-value> with the value you want to for filter for

• e.g. administrator or johndoe or #EXT#@

When using the equalsAny operator, provide a list of target-values as one single string with ; as delimiter.

• e.g. administrator;johndoe;someotheruser

Currently only userPrincipalName and displayName are supported as aad-property.