Forum Discussion
Azure AD Provisioning with Salesforce. Attribute with the Application Groups that a user belong
Hi, I have SSO between Salesforce and Azure AD using Salesforce App available in Azure. I'm also using provisioning to create the users in Salesforce. Everything works fine, but I need another fi...
You may not directly map “all application groups” a user belongs to into Salesforce via Azure AD provisioning. The provisioning service only synchronizes attributes explicitly mapped, and group membership is not exposed as a single attribute. You may need to use extension attributes or app role assignments to represent group membership, then map those into Salesforce. learn.microsoft.com/en-us/entra/identity/saas-apps/salesforce-provisioning-tutorial