Skip to content

Commit 56d7739

Browse files
authored
Merge pull request #103541 from MicrosoftDocs/master
2/06 AM Publish
2 parents 57669c5 + ad51f34 commit 56d7739

File tree

238 files changed

+1801
-1394
lines changed

Some content is hidden

Large Commits have some content hidden by default. Use the searchbox below for content that may be hidden.

238 files changed

+1801
-1394
lines changed

.openpublishing.redirection.json

Lines changed: 121 additions & 11 deletions
Original file line numberDiff line numberDiff line change
@@ -35902,9 +35902,39 @@
3590235902
},
3590335903
{
3590435904
"source_path": "articles/active-directory/active-directory-enterprise-apps-manage-provisioning.md",
35905-
"redirect_url": "/azure/active-directory/manage-apps/configure-automatic-user-provisioning-portal",
35905+
"redirect_url": "/azure/active-directory/app-provisioning/configure-automatic-user-provisioning-portal",
3590635906
"redirect_document_id": true
3590735907
},
35908+
{
35909+
"source_path": "articles/active-directory/manage-apps/plan-auto-user-provisioning.md",
35910+
"redirect_url": "/azure/active-directory/app-provisioning/plan-auto-user-provisioning",
35911+
"redirect_document_id": false
35912+
},
35913+
{
35914+
"source_path": "articles/active-directory/manage-apps/plan-cloud-hr-provision.md",
35915+
"redirect_url": "/azure/active-directory/app-provisioning/plan-cloud-hr-provision",
35916+
"redirect_document_id": false
35917+
},
35918+
{
35919+
"source_path": "articles/active-directory/manage-apps/provisioning-agent-release-version-history.md",
35920+
"redirect_url": "/azure/active-directory/app-provisioning/provisioning-agent-release-version-history",
35921+
"redirect_document_id": false
35922+
},
35923+
{
35924+
"source_path": "articles/active-directory/manage-apps/sap-successfactors-attribute-reference.md",
35925+
"redirect_url": "/azure/active-directory/app-provisioning/sap-successfactors-attribute-reference",
35926+
"redirect_document_id": false
35927+
},
35928+
{
35929+
"source_path": "articles/active-directory/manage-apps/skip-out-of-scope-deletions.md",
35930+
"redirect_url": "/azure/active-directory/app-provisioning/skip-out-of-scope-deletions",
35931+
"redirect_document_id": false
35932+
},
35933+
{
35934+
"source_path": "articles/active-directory/manage-apps/configure-automatic-user-provisioning-portal.md",
35935+
"redirect_url": "/azure/active-directory/app-provisioning/configure-automatic-user-provisioning-portal",
35936+
"redirect_document_id": false
35937+
},
3590835938
{
3590935939
"source_path": "articles/active-directory/active-directory-enterprise-apps-manage-sso.md",
3591035940
"redirect_url": "/azure/active-directory/manage-apps/configure-single-sign-on-portal",
@@ -35945,6 +35975,16 @@
3594535975
"redirect_url": "/azure/active-directory/manage-apps/use-scim-to-provision-users-and-groups",
3594635976
"redirect_document_id": true
3594735977
},
35978+
{
35979+
"source_path": "articles/active-directory/manage-apps/use-scim-to-provision-users-and-groups.md",
35980+
"redirect_url": "/azure/active-directory/app-provisioning/use-scim-to-provision-users-and-groups",
35981+
"redirect_document_id": false
35982+
},
35983+
{
35984+
"source_path": "articles/active-directory/manage-apps/workday-attribute-reference.md",
35985+
"redirect_url": "/azure/active-directory/app-provisioning/workday-attribute-reference",
35986+
"redirect_document_id": false
35987+
},
3594835988
{
3594935989
"source_path": "articles/active-directory/active-directory/migrate-adfs-apps-to-azure.md",
3595035990
"redirect_url": "/azure/active-directory/manage-apps/migrate-adfs-apps-to-azure",
@@ -35965,16 +36005,31 @@
3596536005
"redirect_url": "/azure/active-directory/manage-apps/user-provisioning",
3596636006
"redirect_document_id": true
3596736007
},
36008+
{
36009+
"source_path": "articles/active-directory/manage-apps/user-provisioning.md",
36010+
"redirect_url": "/azure/active-directory/app-provisioning/user-provisioning",
36011+
"redirect_document_id": false
36012+
},
36013+
{
36014+
"source_path": "articles/active-directory/manage-apps/user-provisioning-sync-attributes-for-mapping.md",
36015+
"redirect_url": "/azure/active-directory/app-provisioning/user-provisioning-sync-attributes-for-mapping",
36016+
"redirect_document_id": false
36017+
},
3596836018
{
3596936019
"source_path": "articles/active-directory/active-directory-saas-custom-apps.md",
3597036020
"redirect_url": "/azure/active-directory/manage-apps/configure-single-sign-on-non-gallery-applications",
3597136021
"redirect_document_id": true
3597236022
},
3597336023
{
3597436024
"source_path": "articles/active-directory/active-directory-saas-customizing-attribute-mappings.md",
35975-
"redirect_url": "/azure/active-directory/manage-apps/customize-application-attributes",
36025+
"redirect_url": "/azure/active-directory/app-provisioning/customize-application-attributes",
3597636026
"redirect_document_id": true
3597736027
},
36028+
{
36029+
"source_path": "articles/active-directory/manage-apps/customize-application-attributes.md",
36030+
"redirect_url": "/azure/active-directory/app-provisioning/customize-application-attributes",
36031+
"redirect_document_id": false
36032+
},
3597836033
{
3597936034
"source_path": "articles/active-directory/active-directory-saas-ie-group-policy.md",
3598036035
"redirect_url": "/azure/active-directory/manage-apps/deploy-access-panel-browser-extension",
@@ -35987,19 +36042,34 @@
3598736042
},
3598836043
{
3598936044
"source_path": "articles/active-directory/active-directory-saas-provisioning-reporting.md",
35990-
"redirect_url": "/azure/active-directory/manage-apps/check-status-user-account-provisioning",
36045+
"redirect_url": "/azure/active-directory/app-provisioning/check-status-user-account-provisioning",
3599136046
"redirect_document_id": true
3599236047
},
36048+
{
36049+
"source_path": "articles/active-directory/manage-apps/check-status-user-account-provisioning.md",
36050+
"redirect_url": "/azure/active-directory/app-provisioning/check-status-user-account-provisioning",
36051+
"redirect_document_id": false
36052+
},
3599336053
{
3599436054
"source_path": "articles/active-directory/active-directory-saas-scoping-filters.md",
35995-
"redirect_url": "/azure/active-directory/manage-apps/define-conditional-rules-for-provisioning-user-accounts",
36055+
"redirect_url": "/azure/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts",
3599636056
"redirect_document_id": true
3599736057
},
36058+
{
36059+
"source_path": "articles/active-directory/manage-apps/define-conditional-rules-for-provisioning-user-accounts.md",
36060+
"redirect_url": "/azure/active-directory/app-provisioning/define-conditional-rules-for-provisioning-user-accounts",
36061+
"redirect_document_id": false
36062+
},
3599836063
{
3599936064
"source_path": "articles/active-directory/active-directory-saas-writing-expressions-for-attribute-mappings.md",
36000-
"redirect_url": "/azure/active-directory/manage-apps/functions-for-customizing-application-data",
36065+
"redirect_url": "/azure/active-directory/app-provisioning/functions-for-customizing-application-data",
3600136066
"redirect_document_id": true
3600236067
},
36068+
{
36069+
"source_path": "articles/active-directory/manage-apps/functions-for-customizing-application-data.md",
36070+
"redirect_url": "/azure/active-directory/app-provisioning/functions-for-customizing-application-data",
36071+
"redirect_document_id": false
36072+
},
3600336073
{
3600436074
"source_path": "articles/active-directory/application-access-assignment-how-to-add-assignment.md",
3600536075
"redirect_url": "/azure/active-directory/manage-apps/methods-for-assigning-users-and-groups",
@@ -36127,34 +36197,74 @@
3612736197
},
3612836198
{
3612936199
"source_path": "articles/active-directory/application-provisioning-config-problem-no-users-provisioned.md",
36130-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-config-problem-no-users-provisioned",
36200+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem-no-users-provisioned",
3613136201
"redirect_document_id": true
3613236202
},
36203+
{
36204+
"source_path": "articles/active-directory/manage-apps/application-provisioning-config-problem-no-users-provisioned.md",
36205+
"redirect_url": "azure/active-directory/app-provisioning/application-provisioning-config-problem-no-users-provisioned",
36206+
"redirect_document_id": false
36207+
},
3613336208
{
3613436209
"source_path": "articles/active-directory/application-provisioning-config-problem-storage-limit.md",
36135-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-config-problem-storage-limit",
36210+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem-storage-limit",
3613636211
"redirect_document_id": true
3613736212
},
36213+
{
36214+
"source_path": "articles/active-directory/manage-apps/application-provisioning-config-problem-storage-limit.md",
36215+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem-storage-limit",
36216+
"redirect_document_id": false
36217+
},
3613836218
{
3613936219
"source_path": "articles/active-directory/application-provisioning-config-problem-wrong-users-provisioned.md",
36140-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-config-problem-wrong-users-provisioned",
36220+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem-wrong-users-provisioned",
3614136221
"redirect_document_id": true
3614236222
},
36223+
{
36224+
"source_path": "articles/active-directory/manage-apps/application-provisioning-config-problem-wrong-users-provisioned.md",
36225+
"redirect_url": "azure/active-directory/app-provisioning/application-provisioning-config-problem-wrong-users-provisioned",
36226+
"redirect_document_id": false
36227+
},
3614336228
{
3614436229
"source_path": "articles/active-directory/application-provisioning-config-problem.md",
36145-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-config-problem",
36230+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem",
3614636231
"redirect_document_id": true
3614736232
},
36233+
{
36234+
"source_path": "articles/active-directory/manage-apps/application-provisioning-config-problem.md",
36235+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-config-problem",
36236+
"redirect_document_id": false
36237+
},
36238+
{
36239+
"source_path": "articles/active-directory/manage-apps/application-provisioning-configure-api.md",
36240+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-configure-api",
36241+
"redirect_document_id": false
36242+
},
36243+
{
36244+
"source_path": "articles/active-directory/manage-apps/application-provisioning-quarantine-status.md",
36245+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-quarantine-status",
36246+
"redirect_document_id": false
36247+
},
3614836248
{
3614936249
"source_path": "articles/active-directory/application-provisioning-when-will-provisioning-finish-specific-user.md",
36150-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-when-will-provisioning-finish-specific-user",
36250+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user",
3615136251
"redirect_document_id": true
3615236252
},
36253+
{
36254+
"source_path": "articles/active-directory/manage-apps/application-provisioning-when-will-provisioning-finish-specific-user.md",
36255+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-when-will-provisioning-finish-specific-user",
36256+
"redirect_document_id": false
36257+
},
3615336258
{
3615436259
"source_path": "articles/active-directory/application-provisioning-when-will-provisioning-finish.md",
36155-
"redirect_url": "/azure/active-directory/manage-apps/application-provisioning-when-will-provisioning-finish",
36260+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-when-will-provisioning-finish",
3615636261
"redirect_document_id": true
3615736262
},
36263+
{
36264+
"source_path": "articles/active-directory/manage-apps/application-provisioning-when-will-provisioning-finish.md",
36265+
"redirect_url": "/azure/active-directory/app-provisioning/application-provisioning-when-will-provisioning-finish",
36266+
"redirect_document_id": false
36267+
},
3615836268
{
3615936269
"source_path": "articles/active-directory/application-proxy-back-end-kerberos-constrained-delegation-how-to.md",
3616036270
"redirect_url": "/azure/active-directory/manage-apps/application-proxy-back-end-kerberos-constrained-delegation-how-to",

articles/active-directory/manage-apps/application-provisioning-config-problem-no-users-provisioned.md renamed to articles/active-directory/app-provisioning/application-provisioning-config-problem-no-users-provisioned.md

Lines changed: 4 additions & 4 deletions
Original file line numberDiff line numberDiff line change
@@ -21,9 +21,9 @@ ms.collection: M365-identity-device-management
2121
# No users are being provisioned to an Azure AD Gallery application
2222
After automatic provisioning has been configured for an application (including verifying that the app credentials provided to Azure AD to connect to the app are valid), then users and/or groups are provisioned to the app. Provisioning is determined by the following things:
2323

24-
- Which users and groups have been **assigned** to the application. Note that provisioning nested groups or Office 365 groups is not supported. For more information on assignment, see [Assign a user or group to an enterprise app in Azure Active Directory](assign-user-or-group-access-portal.md).
24+
- Which users and groups have been **assigned** to the application. Note that provisioning nested groups or Office 365 groups is not supported. For more information on assignment, see [Assign a user or group to an enterprise app in Azure Active Directory](../manage-apps/assign-user-or-group-access-portal.md).
2525
- Whether or not **attribute mappings** are enabled, and configured to sync valid attributes from Azure AD to the app. For more information on attribute mappings, see [Customizing User Provisioning Attribute Mappings for SaaS Applications in Azure Active Directory](customize-application-attributes.md).
26-
- Whether or not there is a **scoping filter** present that is filtering users based on specific attribute values. For more information on scoping filters, see [Attribute-based application provisioning with scoping filters](define-conditional-rules-for-provisioning-user-accounts.md).
26+
- Whether or not there is a **scoping filter** present that is filtering users based on specific attribute values. For more information on scoping filters, see [Attribute-based application provisioning with scoping filters](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
2727

2828
If you observe that users are not being provisioned, consult the [Provisioning logs (preview)](../reports-monitoring/concept-provisioning-logs.md?context=azure/active-directory/manage-apps/context/manage-apps-context) in Azure AD. Search for log entries for a specific user.
2929

@@ -49,8 +49,8 @@ If you set the **Provisioning Status** to be **On** in the **Azure Active Direct
4949

5050
When a user shows up as “skipped” in the provisioning logs, it is important to review the **Steps** tab of the log to determine the reason. Below are common reasons and resolutions:
5151

52-
- **A scoping filter has been configured** **that is filtering the user out based on an attribute value**. For more information on scoping filters, see [scoping filters](define-conditional-rules-for-provisioning-user-accounts.md).
53-
- **The user is “not effectively entitled”.** If you see this specific error message, it is because there is a problem with the user assignment record stored in Azure AD. To fix this issue, unassign the user (or group) from the app, and reassign it again. For more information on assignment, see [Assign user or group access](assign-user-or-group-access-portal.md).
52+
- **A scoping filter has been configured** **that is filtering the user out based on an attribute value**. For more information on scoping filters, see [scoping filters](../app-provisioning/define-conditional-rules-for-provisioning-user-accounts.md).
53+
- **The user is “not effectively entitled”.** If you see this specific error message, it is because there is a problem with the user assignment record stored in Azure AD. To fix this issue, unassign the user (or group) from the app, and reassign it again. For more information on assignment, see [Assign user or group access](../manage-apps/assign-user-or-group-access-portal.md).
5454
- **A required attribute is missing or not populated for a user.** An important thing to consider when setting up provisioning is to review and configure the attribute mappings and workflows that define which user (or group) properties flow from Azure AD to the application. This configuration includes setting the “matching property” that is used to uniquely identify and match users/groups between the two systems. For more information on this important process, see [Customizing User Provisioning Attribute Mappings for SaaS Applications in Azure Active Directory](customize-application-attributes.md).
5555
- **Attribute mappings for groups:** Provisioning of the group name and group details, in addition to the members, if supported for some applications. You can enable or disable this functionality by enabling or disabling the **Mapping** for group objects shown in the **Provisioning** tab. If provisioning groups is enabled, be sure to review the attribute mappings to ensure an appropriate field is being used for the “matching ID”. The matching ID can be the display name or email alias. The group and its members are not provisioned if the matching property is empty or not populated for a group in Azure AD.
5656

articles/active-directory/manage-apps/application-provisioning-config-problem-storage-limit.md renamed to articles/active-directory/app-provisioning/application-provisioning-config-problem-storage-limit.md

Lines changed: 1 addition & 1 deletion
Original file line numberDiff line numberDiff line change
@@ -38,7 +38,7 @@ Any secret tokens, URIs, notification email addresses, user names, and passwords
3838

3939
There are two possible ways to work around this issue today:
4040

41-
1. **Use two gallery application instances, one for single sign-on and one for user provisioning** - Taking the gallery application [LinkedIn Elevate](../saas-apps/linkedinelevate-tutorial.md) as an example, you can add LinkedIn Elevate from the gallery and configure it for single sign-on. For provisioning, add another instance of LinkedIn Elevate from the Azure AD app gallery, and name it "LinkedIn Elevate (Provisioning)." For this second instance, configure [provisioning](../saas-apps/linkedinelevate-provisioning-tutorial.md), but not single sign-on. When using this workaround, the same users and groups need to be [assigned](assign-user-or-group-access-portal.md) to both applications.
41+
1. **Use two gallery application instances, one for single sign-on and one for user provisioning** - Taking the gallery application [LinkedIn Elevate](../saas-apps/linkedinelevate-tutorial.md) as an example, you can add LinkedIn Elevate from the gallery and configure it for single sign-on. For provisioning, add another instance of LinkedIn Elevate from the Azure AD app gallery, and name it "LinkedIn Elevate (Provisioning)." For this second instance, configure [provisioning](../saas-apps/linkedinelevate-provisioning-tutorial.md), but not single sign-on. When using this workaround, the same users and groups need to be [assigned](../manage-apps/assign-user-or-group-access-portal.md) to both applications.
4242

4343
2. **Reduce the amount of configuration data stored** - All data entered in the [Admin credentials](user-provisioning.md#how-do-i-set-up-automatic-provisioning-to-an-application) section of the provisioning tab is stored in the same place as the SAML certificate. While it may not be possible to reduce the length of all of this data, some optional configuration fields like the **Notification Email** can be removed.
4444

0 commit comments

Comments
 (0)