Loading
ただいま大変多くのお問い合わせをいただいており、ご連絡までにお時間を頂戴しております続きを読む

ITSM - Limitations of Employee Provisioning from Azure Active Directory (Azure AD / Microsoft Entra ID)

公開日: Jul 4, 2026
説明

Employee Provisioning from Azure AD in ITSM does not currently support all endpoints. The limitations listed below are known and will be addressed in upcoming releases.

解決策
1. Group Member Fetch Not Supported
The GET /groups/{id}/members endpoint is not supported for syncing group members from Azure AD. This is because delta token-based change tracking does not support listing group members,  And  Salesforce uses delta token to track the changes  from Azure side

Impacted API:
GET /groups/{id}/members
Note: Change tracking ($deltaToken) is not supported against this endpoint by Microsoft, which is an upstream limitation.
 
 
2. $select Queries Are Not Supported
Custom attribute mapping using $select query parameters is not supported at this time. If your sync configuration attempts to bring in custom attributes via $select, the sync job will fail.

Recommended Action: Avoid using $select in your sync configuration until this limitation is resolved in a future release. Please use the standard "/users/delta "endpoint

3. Entire Transaction Rolls Back on a Single User Failure
When importing data from Azure AD, if even one user record fails (e.g., due to a missing required field), the entire transaction is rolled back — no records are created or updated.

Recommended Action: Before initiating a sync, ensure all required fields on both the Employee and Person Account objects are populated for every user being imported. Validate your data against required field configurations ahead of time to prevent full sync failures.
ナレッジ記事番号

005388417

 
読み込み中
Salesforce Help | Article