How to Disable Auto-provisioning in Azure AD and what are the best Practices of it?

test A 86

Need to disable the auto provisioning in Azure AD .. what are the best practices to disable?

Dillon Silzer 54,286 Reputation points

2022-11-10T03:19:15.833+00:00

What application are you currently provisioning from (HRMS system) using SCIM?
test A 86 Reputation points

2022-11-10T03:26:33.933+00:00

Hi @Dillon Silzer i am unable to say application, sorry for that.

i can found only this statement online regarding disabled Auto Provisioning "After you've configured provisioning for the first time, you'll notice that the provisioning mode has switched from manual to automatic. You can't change it back to manual. But you can turn off provisioning through the UI. Turning off provisioning in the UI effectively does the same as setting the dropdown to manual."

1 answer

Danny Zollner 9,496 Reputation points Microsoft Employee

2022-11-10T03:37:21.467+00:00

There aren't really any needed best practices here - as our documentation says, it's as simple as turning the status to Off. Turning the provisioning job off will not cause any cascading effects like deleting/disabling users, the provisioning service will just stop. If you're looking to ensure the job does not turn back on, you can revoke the token/credentials being used for provisioning so that even if it were re-enabled by some chance, the job would no longer have any access to perform actions.
Please sign in to rate this answer.
test A 86 Reputation points

2022-11-10T04:05:53.267+00:00

Hi @Anonymous , yeah i do know that and thanks for responding in short time. Is there any other way to disable auto provisioning by power shell commands or any other way ?

Danny Zollner 9,496 Reputation points Microsoft Employee

2022-11-10T20:18:34.17+00:00

There are no PowerShell cmdlets for AAD Provisioning, you can do it via MS Graph API though - see: https://learn.microsoft.com/en-us/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-beta&tabs=http

In addition to the "Pause" option that I linked above, there's also a "Delete" job option which will completely wipe the configuration of the provisioning job and bring you back to the point where you select between Manual and Automatic in the provisioning UI. This is not reversible, so be sure if you use that you that you don't need to back up/make notes on any configuration beforehand.
Sign in to comment