To avoid delays in reflecting new guest users in Microsoft Entra ID and to prevent the application from deleting duplicate users, consider the following approaches:
- Ensure Proper Matching Rules: Review and configure the matching rules used by the Microsoft Entra provisioning service. This ensures that the properties used for matching between the application and Microsoft Entra ID are correctly aligned, which can help in faster identification of users.
- Monitor Provisioning Status: Regularly check the provisioning status in Microsoft Entra to identify any delays or issues with user synchronization. This can help you troubleshoot and address problems promptly.
- Update User Properties: If a user is created in the application but not found in Microsoft Entra ID due to mismatched properties, ensure that the necessary properties are updated in both systems to facilitate quicker matching.
- Delete Non-Matching Users: If the application is not widely used or does not maintain user-specific data, consider deleting non-matching users from the application. This allows new users to be provisioned correctly from Microsoft Entra ID without duplicates.
- Regular Synchronization: Implement a regular synchronization schedule to ensure that any new users created in the application are promptly reflected in Microsoft Entra ID.
By following these strategies, you can minimize the chances of encountering delays and reduce the risk of duplicate user accounts in your application.
References: