Loading

ITSM - Limitations of Employee Provisioning from Azure Active Directory (Azure AD / Microsoft Entra ID)

게시 일자: Jul 4, 2026
상세 설명

Employee Provisioning from Azure AD in ITSM does not currently support all endpoints. The limitations listed below are known and will be addressed in upcoming releases.

솔루션
1. Group Member Fetch Not Supported
The GET /groups/{id}/members endpoint is not supported for syncing group members from Azure AD. This is because delta token-based change tracking does not support listing group members,  And  Salesforce uses delta token to track the changes  from Azure side

Impacted API:
GET /groups/{id}/members
Note: Change tracking ($deltaToken) is not supported against this endpoint by Microsoft, which is an upstream limitation.
 
 
2. $select Queries Are Not Supported
Custom attribute mapping using $select query parameters is not supported at this time. If your sync configuration attempts to bring in custom attributes via $select, the sync job will fail.

Recommended Action: Avoid using $select in your sync configuration until this limitation is resolved in a future release. Please use the standard "/users/delta "endpoint

3. Entire Transaction Rolls Back on a Single User Failure
When importing data from Azure AD, if even one user record fails (e.g., due to a missing required field), the entire transaction is rolled back — no records are created or updated.

Recommended Action: Before initiating a sync, ensure all required fields on both the Employee and Person Account objects are populated for every user being imported. Validate your data against required field configurations ahead of time to prevent full sync failures.
Knowledge 기사 번호

005388417

 
로드 중
Salesforce Help | Article