There aren't really any needed best practices here - as our documentation says, it's as simple as turning the status to Off. Turning the provisioning job off will not cause any cascading effects like deleting/disabling users, the provisioning service will just stop. If you're looking to ensure the job does not turn back on, you can revoke the token/credentials being used for provisioning so that even if it were re-enabled by some chance, the job would no longer have any access to perform actions.
How to Disable Auto-provisioning in Azure AD and what are the best Practices of it?
Need to disable the auto provisioning in Azure AD .. what are the best practices to disable?
What application are you currently provisioning from (HRMS system) using SCIM?
Hi @Dillon Silzer i am unable to say application, sorry for that.
i can found only this statement online regarding disabled Auto Provisioning "After you've configured provisioning for the first time, you'll notice that the provisioning mode has switched from manual to automatic. You can't change it back to manual. But you can turn off provisioning through the UI. Turning off provisioning in the UI effectively does the same as setting the dropdown to manual."
Sign in to comment
Sort by: Most helpful
Hi @Danny Zollner , yeah i do know that and thanks for responding in short time. Is there any other way to disable auto provisioning by power shell commands or any other way ?
There are no PowerShell cmdlets for AAD Provisioning, you can do it via MS Graph API though - see: https://learn.microsoft.com/en-us/graph/api/synchronization-synchronizationjob-pause?view=graph-rest-beta&tabs=http
In addition to the "Pause" option that I linked above, there's also a "Delete" job option which will completely wipe the configuration of the provisioning job and bring you back to the point where you select between Manual and Automatic in the provisioning UI. This is not reversible, so be sure if you use that you that you don't need to back up/make notes on any configuration beforehand.
Sign in to comment