This article lists all releases of Microsoft Entra Connect Provisioning Agent and describes new features and fixed issues.
Day in brief
Updates to provisioning safeguards and recovery guidance lead a documentation-heavy 23 July
The supplied feed is best read as documentation maintenance rather than a product rollout: all 78 recorded changes were updates, with no new or removed items and no Message Center entries. The clearest administrator-relevant subjects are accidental-deletion prevention and disaster-recovery rollback for Microsoft Entra provisioning, with Conditional Access and authentication resilience as related security guidance. Nothing supplied establishes a preview, general availability release, retirement, changed default, or tenant-wide behavior change.
- External ID provisioning: accidental-deletion prevention guidance
External ID · ProvisioningThe updated documentation covers how to enable accidental-deletion prevention in the Microsoft Entra provisioning service for applications and cross-tenant synchronization. This is a concrete safeguard to check in affected provisioning flows; the entry does not say that default deletion behavior changed or that the control is newly available.
- Application Provisioning: configuration export and rollback
Entra ID · ProvisioningThe updated Entra ID page covers exporting Application Provisioning configuration and rolling back to a known-good state for disaster recovery. It is a practical recovery reference for administrators changing provisioning configuration, but the evidence describes documentation rather than a launch, preview, or mandatory migration.
- Conditional Access templates: policy-design guidance
Entra ID · Conditional AccessThe updated Entra ID page describes Conditional Access templates as preconfigured policies aligned with Microsoft recommendations. This is security and policy-design guidance; the supplied record does not indicate a template rollout, changed default, or altered enforcement behavior.
- Backup Authentication System: resilience guidance
Entra ID · AuthenticationThe updated Entra ID architecture page describes the backup authentication system as a resilience feature intended to maintain authentication availability for users and services. The entry is architecture documentation; it does not report a failover event, new availability commitment, or setting that administrators must apply.
This period briefing was generated by AI from the tracked Microsoft Learn and Message Center changes.
78 updates
Microsoft Entra ID
76 updatesauthor: jenniferf-skc
A guide for independent software vendors for enabling automated provisioning in Microsoft Entra ID
Export a Microsoft Identity Manager connector for use with the Microsoft Entra ECMA Connector Host
UpdatedDescribes how to create and export a connector from MIM Sync to be used with the Microsoft Entra ECMA Connector Host.
Learn how to export your Application Provisioning configuration and roll back to a known good state for disaster recovery in Microsoft Entra ID.
Find out when a specific user is able to access an app in Microsoft Entra Application Provisioning
UpdatedHow to find out when a critically important user is able to access an application you have configured for user provisioning with Microsoft Entra ID.
Learn how to integrate Microsoft Entra Provisioning logs with Azure Monitor logs and use the associated workbooks.
Technical deep dive into SAP SuccessFactors-HR driven provisioning for Microsoft Entra ID.
This document describes how to configure Microsoft Entra ID to provision users into SAP ERP Central Component (SAP ECC, formerly SAP R/3) with NetWeaver AS ABAP 7.0 or later.
This document describes how to configure Microsoft Entra ID to provision users with external systems that offer REST and SOAP APIs.
This document describes how to configure Microsoft Entra ID to provision users with external systems that offer web services based APIs.
This document describes how to configure Microsoft Entra ID to provision users into an LDAP directory.
This tutorial describes how to provision users from Microsoft Entra ID into a SQL database.
Preparing for Microsoft Entra provisioning to Active Directory Lightweight Directory Services
UpdatedThis document describes how to configure Microsoft Entra ID to provision users into Active Directory Lightweight Directory Services as an example of an LDAP directory.
Learn how to provision users on demand in Microsoft Entra ID.
Provisioning users into SQL based applications using the ECMA Connector host
When you've configured an application for automatic user provisioning, learn what a provisioning status of Quarantine means and how to clear it.
Learn how to retrieve pronoun information from Workday
Learn which attributes from SuccessFactors are supported by SuccessFactors-HR driven provisioning in Microsoft Entra ID.
Learn how to use scoping filters to define attribute-based rules that determine which users or groups are provisioned in Microsoft Entra ID.
Learn how to override the default behavior of deprovisioning out of scope users in Microsoft Entra ID.
When configuring user provisioning with Microsoft Entra ID and SaaS apps, use the directory extension feature to add source attributes that aren't synchronized by default.
Understand how Application Provisioning works in Microsoft Entra ID.
Understand how expression builder works with Application Provisioning in Microsoft Entra ID.
Use partner driven integrations to provision accounts into all your applications.
Learn how to manage user account provisioning for enterprise apps using the Microsoft Entra ID.
Learn which attributes that you can fetch from Workday using XPATH queries in Microsoft Entra ID.
Learn how to implement API-driven inbound provisioning with Azure Logic Apps.
Learn how to implement API-driven inbound provisioning with a PowerShell script.
Learn how to configure API-driven inbound provisioning app.
Learn how to extend API-driven inbound provisioning to sync custom attributes.
Learn how to grant access to the inbound provisioning API.
This tutorial provides step-by-step instructions so you can get started with API-driven inbound provisioning using cURL.
Learn more about the capabilities and integration scenarios supported by API-driven inbound provisioning.
Learn how to get started quickly with API-driven inbound provisioning using Graph Explorer
The Microsoft Entra provisioning service matches users in Microsoft Entra ID with users already in an application. In some cases, an application may have users that do not match with any in Microsoft Entra ID.
This document describes how to configure Microsoft Entra ID to provision users with external systems that offer Windows PowerShell based APIs.
Plan Auto User Provisioning
UpdatedGuidance for planning and executing automatic user provisioning in Microsoft Entra ID
Learn how to bring identities from SAP SuccessFactors and other sources into Microsoft Entra ID and give them access to SAP ECC, SAP S/4HANA, and other apps.
Learn how to simplify user provisioning with Expression Builder, handle duplicate users, and transform user attributes for seamless integration.
This article describes the Azure Monitor workbook for provisioning.
Reference for writing expressions for attribute mappings in Microsoft Entra Application Provisioning
UpdatedLearn how to use expression mappings to transform attribute values into an acceptable format during automated provisioning of SaaS app objects in Microsoft Entra ID. Includes a reference list of functions.
Learn about attribute mappings for Software as a Service (SaaS) apps in Microsoft Entra Application Provisioning. Learn what attributes are and how you can modify them to address your business needs.
Technical deep dive into Workday-HR driven provisioning in Microsoft Entra ID
Describes how to troubleshoot various issues you might encounter when you install and use the ECMA Connector Host.
Troubleshoot common issues faced when a user isn't appearing in a Microsoft Entra Gallery Application configured for user provisioning with Microsoft Entra ID.
Learn how to check the status of automatic user account provisioning jobs, and how to troubleshoot the provisioning of individual users.
Learn how to troubleshoot attribute retrieval issues with HR provisioning
Learn how to troubleshoot InsufficientAccessRights error when provisioning to on-premises Active Directory.
This article provides potential issues and resolutions that guide you in how to troubleshoot issues with the inbound provisioning API.
This article provides potential issues and resolutions that show you how to troubleshoot manager update issues with HR provisioning
How to troubleshoot common issues faced when configuring user provisioning to an application already listed in the Microsoft Entra application gallery.
Learn how to troubleshoot user creation issues with HR provisioning
Learn how to troubleshoot user update issues with HR provisioning
This article provides potential issues and resolutions so you can troubleshoot writeback issues with HR provisioning.
Learn to develop a SCIM endpoint, integrate your SCIM API with Microsoft Entra ID, and automatically provision users and groups into your cloud applications.
How to solve common protocol compatibility issues faced when adding a non-gallery application that supports SCIM 2.0 to Microsoft Entra ID
System for Cross-domain Identity Management (SCIM) standardizes automatic user provisioning. In this tutorial, you learn to develop a SCIM endpoint, integrate your SCIM API with Microsoft Entra ID, and start automating provisioning users and groups into your cloud applications.
Tutorial - Test your SCIM endpoint for compatibility with the Microsoft Entra provisioning service.
UpdatedThis tutorial describes how to use the Microsoft Entra SCIM Validator to validate that your provisioning server is compatible with the Azure SCIM client.
Use SCIM, Microsoft Graph, and Microsoft Entra ID to provision users and enrich apps with data
UpdatedUsing SCIM and the Microsoft Graph together to provision users and enrich your application with the data it needs in Microsoft Entra ID.
This article describes how to use the Microsoft Entra provisioning service to provision users into an on-premises app that's SCIM enabled.
Learn how continuous access evaluation in Microsoft Entra enhances security by responding to user state changes in near real time.
author: ploegert
An introduction to how you can use Microsoft Entra ID to automatically provision, deprovision, and continuously update user accounts across multiple third-party applications.
Describes overview of HR driven provisioning.
An overview of API-driven inbound provisioning.
Explore the resilience features of Microsoft Entra ID's backup authentication system, designed to maintain authentication availability for users and services.
author: shlipsey3
This document describes how to configure Microsoft Entra ID to provision users into an LDAP directory so that the users can then sign into a Linux or other POSIX system using pluggable authentication.
After entering the sign-in credentials, the consent screen appears. The consent screen provides information about the application and the permissions it requires.
Learn how Conditional Access templates provide preconfigured policies to secure your environment, aligned with Microsoft recommendations.
Discover how to use Conditional Access filters for applications to streamline policy management and enhance security in Microsoft Entra ID.
Understand the phases of Conditional Access policy enforcement in Microsoft Entra and how to apply them to secure user access.
Presents an overview of on-premises application provisioning architecture.
Plan Cloud Hr Provision
UpdatedThis article describes the deployment process of integrating cloud HR systems, such as Workday and SuccessFactors, with Microsoft Entra ID. Integrating Microsoft Entra ID with your cloud HR system results in a complete identity lifecycle management system.
Learn how to save time by using the Microsoft Graph APIs to automate the configuration of automatic provisioning.
Microsoft Entra External ID
2 updatesEnable accidental deletions prevention in the Microsoft Entra provisioning service for applications and cross-tenant synchronization.
Known Issues
UpdatedLearn about known issues when you work with automated application provisioning or cross-tenant synchronization in Microsoft Entra ID.