Open the Identity Syncronizer® Management Studio, go to the "Microsoft Cloud" tab, and locate the "Metadata Sync" section :
This screen displays all of the fields that the Identity Syncronizer® is able to synchronize between Active Directory and the Microsoft Cloud. To enable a field for synchronization check the checkbox next to its name.
...
If you enable Bi-Directional Metadata Sync, it is required that the Identity Syncronizer® - Service be configured to run as an Active Directory administrator account. You can set the service user account as follows:
...