Azure Active Directory single sign-on/provisioning integration with Salesforce

Joao Ferreira 21 Reputation points
2020-08-21T16:13:57.203+00:00

Hi,

I have SSO between Salesforce and Azure AD. I'm also using provisioning to create the users in Salesforce. Everything works fine, but I need another field to pass to Salesforce: The Application Groups that the user belongs. It is possible to add a field to the User in Azure AD with this information and mapping it in Provisioning -> Attribute Mapping with Salesforce?

For user provisioning I have created several groups in the app. For each group I assign a role(profile in Salesforce). Then I assign users to the specific groups. The provisioning start and I also want to send the group(s) that the user is member.

In SSO I can create an additional claim with this information (user.groups [ApplicationGroup]). But I can't do this mapping between Azure AD and Salesforce mapping attributes.

It is possible to do this?

Thanks

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
22,116 questions
0 comments
Accepted answer
  1. AmanpreetSingh-MSFT 56,646 Reputation points
    2020-08-26T08:57:17.083+00:00

    Hi @Joao Ferreira

    You can see all the supported attributes here:

    Azure AD > Enterprise Applications > Salesforce > Mapping > Provision Azure Active Directory Users > Click on Add New Mapping link and under Source attribute drop down.

    The attribute list for Azure Active Directory doesn't include group membership attribute. You can request additional attributes you would like to see supported here.

    As of now, you can only use appRoles to provision users in Salesforce with specific roles.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

    0 comments

0 additional answers

Sort by: Most helpful
Most helpful Newest Oldest

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.