Share via

Entra ID API provisioning not processing requests

Craig Tucker 45 Reputation points
2024-08-04T14:24:27.3833333+00:00

I have setup Entra ID API driven provisioning (Entra ID cloud) in a clients tenancy. API client is using the std PowerShell offering from Microsoft consuming a CSV. CSV content and PSD mapping files using basic schema at the moment (Core + Enterprise users - no custom). Running PowerShell script as a global admin user.

When I initially set this up and ran with new test users these created correctly and any attribute changes were actioned and reflected in Entra ID.

A few days ago when I went back to testing the same environment by adding extra new users and some existing users (to test initial syncing) it stopped processing the requests. Where as before there were entries in the audit and provisioning logs for the request and subsequent actions they no longer appeared.

I setup another Ent App and updated the service principal in PS script but same issue. Tried generating JSON payload from PS script and using MSGraph (with correct permissions) POSTed a request and got the correct 202 response. Checking Audit, provisioning logs via UI and MsGraph not indication of request. Also tested using PS script hosted on Azure VM (ensuring Azure VM Managed Identity has appropriate permissions) and still same issue.

Attribute mapping in Ent App has been setup for EmployeeID and Username attribute matching.

Using MsGraph to check Sync jobs schedule as active, no quarantine, no errors and always no counts in last execution data.

Kind of out of ideas now

Microsoft Security | Microsoft Entra | Microsoft Entra ID
0 comments No comments

1 answer

Sort by: Most helpful
  1. Givary-MSFT 35,786 Reputation points Microsoft Employee Moderator
    2024-08-05T08:03:32.4333333+00:00

    @Craig Tucker Thank you for reaching out to us, As I understand you are trying to perform API driven provisioning as mentioned here - https://learn.microsoft.com/en-us/entra/identity/app-provisioning/inbound-provisioning-api-powershell#:~:text=%2D-,Download%20the%20PowerShell%20script,-Access%20the%20GitHub

    Request you to review this - https://www.youtube.com/watch?v=dBu4Hz2L6Io if in case any steps you missed to configure else we can connect offline and review your configuration.

    Was this answer helpful?


Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.