Loading
Upcoming Mandatory Changes to Public Key Infrastructure (PKI)Mehr lesen
Salesforce Enforces New Security Requirements in Summer 2026Mehr lesen

ITSM - Limitations of Employee Provisioning from Azure Active Directory (Azure AD / Microsoft Entra ID)

Veröffentlichungsdatum: Jul 4, 2026
Beschreibung

Employee Provisioning from Azure AD in ITSM does not currently support all endpoints. The limitations listed below are known and will be addressed in upcoming releases.

Lösung
1. Group Member Fetch Not Supported
The GET /groups/{id}/members endpoint is not supported for syncing group members from Azure AD. This is because delta token-based change tracking does not support listing group members,  And  Salesforce uses delta token to track the changes  from Azure side

Impacted API:
GET /groups/{id}/members
Note: Change tracking ($deltaToken) is not supported against this endpoint by Microsoft, which is an upstream limitation.
 
 
2. $select Queries Are Not Supported
Custom attribute mapping using $select query parameters is not supported at this time. If your sync configuration attempts to bring in custom attributes via $select, the sync job will fail.

Recommended Action: Avoid using $select in your sync configuration until this limitation is resolved in a future release. Please use the standard "/users/delta "endpoint

3. Entire Transaction Rolls Back on a Single User Failure
When importing data from Azure AD, if even one user record fails (e.g., due to a missing required field), the entire transaction is rolled back — no records are created or updated.

Recommended Action: Before initiating a sync, ensure all required fields on both the Employee and Person Account objects are populated for every user being imported. Validate your data against required field configurations ahead of time to prevent full sync failures.
Nummer des Knowledge-Artikels

005388417

 
Laden
Salesforce Help | Article