MSGraph partner events returns user updated multiple times instead of single user created event

Question

We have MIM populating Entra via EntraConnect and for a new user which was created in Entra, the Entra events did not show a user created event. It only showed 3 user updated events in quick succession, all with the same data. The subscription is for user created and updated as per the documentation but we never see user created events, only user updated events, even for new users.

{
...
"resource": "users",
"changeType": "created,updated",
...
}

I see it's a known issue but it seems strange you can subscribe to user created events which will never be generated.

Answer 1

Hi Alistair Young,

Thanks for reaching out to Microsoft!

You're right, this is a known issue with Microsoft Entra. Currently, when a new user is created, the system generates a "UserUpdated" event instead of a "UserCreated" event. This can be confusing, especially since the subscription allows for "created" and "updated" events.

Microsoft is aware of this issue and has indicated that it will be addressed in a future release. In the meantime, you might need to rely on the "UserUpdated" events to track new user creations.

You can check for updates in the change log.

Hope this helps.

If the answer is helpful, please click Accept Answer and kindly upvote. If you have any further questions about this answer, please click Comment.