Map salesforce User Role in Azure automatic user provisioning

Question

Map salesforce User Role in Azure automatic user provisioning

Anas Alamour 0

We are implementing salesforce SSO with Azure AD as identity provider. We are working now on the automatic user provisioning part and the user is created successfully with the required default fields (Alias,Username,Email,First Name,Last Name,Locale,Language,Email Encoding,Time Zone,Currency,ProfileId) and we made the mapping for other custom fields. But our challenge now with the user Role field on salesforce , how we can make the mapping for this field on Azure SSO settings ? Did anyone make that mapping in Azure and guide me how could make that mapping ? Did he/she make that using App Roles in Azure or made expression ?

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-06-30T07:07:35.86+00:00

Hi @Anas Alamour ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

1 answer

Your answer

Shweta Mathur 30,296 Reputation points Microsoft Employee Moderator

2023-06-30T07:07:35.86+00:00

Hi @Anas Alamour ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept Answer" which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.

Answer 1

Shweta Mathur 30,296 Microsoft Employee Moderator

Hi @Anas Alamour ,

Thanks for reaching out.

For gallery applications such as Salesforce and ServiceNow, use the predefined role mappings.

In attribute mappings, it's possible to use the UserRoleId salesforce attribute and map it with a single Salesforce role (mapping type: Constant) in automatic user provisioning.

User's image

For other application mappings, requires that you transform the attribute using an expression.

https://learn.microsoft.com/en-us/azure/active-directory/app-provisioning/customize-application-attributes#provisioning-a-role-to-a-scim-app

Hope this will help.

Thanks,

Shweta

Please remember to "Accept Answer" if answer helped you.

Anas Alamour 0 Reputation points

2023-06-30T11:30:54.5033333+00:00

@Shweta

Hi Shweta

You mentioned that i have to map UserRoleId salesforce attribute as a single Salesforce role (mapping type: Constant) in automatic user provisioning. But i have multiple roles in salesforce, i f i made it Constant, all the provisioned users will have the same role and this is not correct. I need to build it dynamically based on some business conditions (The employee office location, Job Title,....etc.) . As an example :

in Azure AD , If the user site/office location is New York and the job title is sales manager , set the user role to "NewYork_SM" in salesforce.

Thanks.

Share via

Map salesforce User Role in Azure automatic user provisioning

1 answer

Your answer