# Get user's custom attribute from Active Directory

Source: [https://docs.virtosoftware.com/docs/virto-workflow-automation-web-part/virto-sharepoint-workflow-activities-kit-sharepoint-2010-workflow-platform/ad-activities/get-users-attribute-from-ad/](https://docs.virtosoftware.com/docs/virto-workflow-automation-web-part/virto-sharepoint-workflow-activities-kit-sharepoint-2010-workflow-platform/ad-activities/get-users-attribute-from-ad/)
Product: Virto Workflow Automation Web Part
Updated: 2026-08-12


This activity allows receiving user’s or secure group custom attribute from Active Directory and stores result in variable.

![Get user's custom attribute from Active Directory activity in the SharePoint Workflow Designer](https://img-docs.virtosoftware.com/wp-content/uploads/2024/10/get_users_custom_attribute_from_active_directory_1.png)

If attribute does not exist, this method returns empty string.

## **SharePoint Workflow Designer Phrase**

Get this user this attribute from this domain and store result in Variable: variable

## **Parameters**


| Parameter | Description |
|---|---|
| this user | User or secure group login name. Ex: “user@domain”, “domain\user” or “user” |
| this attribute | Attribute name |
| this domain | **Optional**. Domain name. You should enter domain name if user name without adomain, otherwise it will be calculated from the user name. |


By default, activity uses the current user when authenticating. If you want to use custom authentication, use “Set Active Directory authentication” activity before. See “LDAP Attribute” table to determine the attribute name.

**Table: LDAP Attributes**


| LDAP Attribute | Example |
|---|---|
| CN - Common Name | CN=Guy Thomas. Actually, this LDAP attribute is made up from givenName joined to SN. |
| description | What you see in Active Directory Users and Computers. Not to be confused with displayName on the Users property sheet. |
| displayName | displayName = Guy Thomas. If you script this property, be sure you understand which field you are configuring. DisplayName can be confused with CN or description. |
| DN - also distinguishedName | DN is simply the most important LDAP attribute. CN=Jay Jamieson, OU= Newport,DC=cp,DC=com |
| givenName | Firstname also called Christian name |
| homeDrive | Home Folder : connect. Tricky to configure |
| name | name = Guy Thomas. Exactly the same as CN. |
| objectCategory | Defines the Active Directory Schema category. For example, |


![LDAP attribute names mapped to Active Directory user properties for the custom attribute activity](https://img-docs.virtosoftware.com/wp-content/uploads/2024/11/image3.png)


| LDAP Attribute | Description |
|---|---|
| c | Country or Region |
| company | Company or organization name |
| department | Useful category to fill in and use for filtering |
| homephone | Home Phone number, (Lots more phone LDAPs) |
| l (Lower case L) | L = Location. City ( Maybe Office |
| location | Important, particularly for printers. |
| manager | Boss, manager |
| mobile | Mobile Phone number |
| ObjectClass | Usually, User, or Computer |
| OU | Organizational unit. See also DN |
| postalCode | Zip or post code |
| st | State, Province or County |
| streetAddress | First line of address |
| telephoneNumber | Office Phone |