You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md
+15-19Lines changed: 15 additions & 19 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -72,31 +72,27 @@ Scoping filters are configured as part of the attribute mappings for each Azure
72
72
1. Sign in to the [Microsoft Entra admin center](https://entra.microsoft.com) as at least a [Application Administrator](../roles/permissions-reference.md#application-administrator).
5. In the **Mappings** section, select the mapping that you want to configure a scoping filter for: for example, "Synchronize Azure Active Directory Users to ServiceNow".
87
+
7. In the **Mappings** section, select the mapping that you want to configure a scoping filter for: for example, "Synchronize Azure Active Directory Users to ServiceNow".
89
88
::: zone-end
90
89
91
90
::: zone pivot="cross-tenant-synchronization"
92
-
5. In the **Mappings** section, select the mapping that you want to configure a scoping filter for: for example, "Provision Azure Active Directory Users".
91
+
8. In the **Mappings** section, select the mapping that you want to configure a scoping filter for: for example, "Provision Azure Active Directory Users".
93
92
::: zone-end
94
-
95
-
6. Select the **Source object scope** menu.
96
-
97
-
7. Select **Add scoping filter**.
98
-
99
-
8. Define a clause by selecting a source **Attribute Name**, an **Operator**, and an **Attribute Value** to match against. The following operators are supported:
93
+
9. Select the **Source object scope** menu.
94
+
10. Select **Add scoping filter**.
95
+
11. Define a clause by selecting a source **Attribute Name**, an **Operator**, and an **Attribute Value** to match against. The following operators are supported:
100
96
101
97
a. **EQUALS**. Clause returns "true" if the evaluated attribute matches the input string value exactly (case sensitive).
102
98
@@ -127,15 +123,15 @@ Scoping filters are configured as part of the attribute mappings for each Azure
127
123
> - Filtering is not supported for multi-valued attributes.
128
124
> - Scoping filters will return "false" if the value is null / empty.
129
125
130
-
9. Optionally, repeat steps 7-8 to add more scoping clauses.
126
+
12. Optionally, repeat steps 7-8 to add more scoping clauses.
131
127
132
-
10. In **Scoping Filter Title**, add a name for your scoping filter.
128
+
13. In **Scoping Filter Title**, add a name for your scoping filter.
133
129
134
-
11. Select **OK**.
130
+
14. Select **OK**.
135
131
136
-
12. Select **OK** again on the **Scoping Filters** screen. Optionally, repeat steps 6-11 to add another scoping filter.
132
+
15. Select **OK** again on the **Scoping Filters** screen. Optionally, repeat steps 6-11 to add another scoping filter.
137
133
138
-
13. Select **Save** on the **Attribute Mapping** screen.
134
+
16. Select **Save** on the **Attribute Mapping** screen.
139
135
140
136
>[!IMPORTANT]
141
137
> Saving a new scoping filter triggers a new full sync for the application, where all users in the source system are evaluated again against the new scoping filter. If a user in the application was previously in scope for provisioning, but falls out of scope, their account is disabled or deprovisioned in the application. To override this default behavior, refer to [Skip deletion for user accounts that go out of scope](../app-provisioning/skip-out-of-scope-deletions.md).
0 commit comments