Share via

Receive Error Code Multiple Grants Not Supported when using Provision On Demand for Salesforce Sandbox

MEZATASTA, Karen 21 Reputation points
2022-03-24T11:30:26.103+00:00

I just completed refreshing a Salesforce Sandbox and set up SSO with a new certificate, etc.
I wanted to test provisioning to ensure SSO appears correctly with just one user so I used Provision On Demand.
I received the error code:

Error code
MultipleGrantsNotSupported

Error message
An error occurred while evaluating this function: 'ProfileName = SingleAppRoleAssignment(source: appRoleAssignments).'

But also received the following success messages:

Import user
Successfully imported user
View details

Determine if user is in scope
User is in scope
View details

Match user between source and target system
Successfully matched user
View details

I reviewed the provision on demand documentation but I am not sure if I am missing something that is obvious.

Thanks for any help

Microsoft Security | Microsoft Entra | Microsoft Entra ID

Answer accepted by question author

Danny Zollner 10,831 Reputation points Microsoft Employee Moderator
2022-03-25T16:29:55.373+00:00

Do these users have more than one role assigned? The SingleAppRoleAssignment function can only pass one role (or Profile, in Salesforce's case) from AAD -> app. I believe the error you're seeing about multiple grants not supported means that more than one AAD appRole is assigned to each user generating that error.

Was this answer helpful?

1 person found this answer helpful.

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as 'Accepted' by the question author and 'Recommended' by moderators, which helps users know the answer solved the author's problem.