You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/app-provisioning/customize-application-attributes.md
+3-3Lines changed: 3 additions & 3 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -199,7 +199,7 @@ Custom attributes can't be referential attributes, multi-value or complex-typed
199
199
## Provisioning a role to a SCIM app
200
200
Use the steps below to provision roles for a user to your application. Note that the description below is specific to custom SCIM applications. For gallery applications such as Salesforce and ServiceNow, use the pre-defined role mappings. The bullets below describe how to transform the AppRoleAssignments attribute to the format your application expects.
201
201
202
-
- Mapping an appRoleAssignment in Azure AD to a role in your application requires that you transform the attribute using an [expression](../app-provisioning/functions-for-customizing-application-data.md). The appRoleAssignment attribute **should not be mapped directly** to a role attribute without using an expression to parse the role details.
202
+
- Mapping an appRoleAssignment in Azure AD to a role in your application requires that you transform the attribute using an [expression](../app-provisioning/functions-for-customizing-application-data.md). The appRoleAssignment attribute **shouldn't be mapped directly** to a role attribute without using an expression to parse the role details.
203
203
204
204
-**SingleAppRoleAssignment**
205
205
-**When to use:** Use the SingleAppRoleAssignment expression to provision a single role for a user and to specify the primary role.
@@ -259,7 +259,7 @@ The request formats in the PATCH and POST differ. To ensure that POST and PATCH
- All roles will be provisioned as primary = false.
262
-
- The POST contains the role type. The PATCH request doesn't contain type. We are working on sending the type in both POST and PATCH requests.
262
+
- The POST contains the role type. The PATCH request doesn't contain type. We're working on sending the type in both POST and PATCH requests.
263
263
- AppRoleAssignmentsComplex isn't compatible with setting scope to "Sync All users and groups."
264
264
265
265
- **Example output**
@@ -337,7 +337,7 @@ Selecting this option will effectively force a resynchronization of all users wh
337
337
- Adding a photo attribute to be provisioned to an app isn't supported today as you can't specify the format to sync the photo. You can request the feature on [User Voice](https://feedback.azure.com/d365community/forum/22920db1-ad25-ec11-b6e6-000d3a4f0789)
338
338
- The attribute IsSoftDeleted is often part of the default mappings for an application. IsSoftdeleted can be true in one of four scenarios (the user is out of scope due to being unassigned from the application, the user is out of scope due to not meeting a scoping filter, the user has been soft deleted in Azure AD, or the property AccountEnabled is set to false on the user). It's not recommended to remove the IsSoftDeleted attribute from your attribute mappings.
339
339
- The Azure AD provisioning service doesn't support provisioning null values.
340
-
- They primary key, typically "ID", should not be included as a target attribute in your attribute mappings.
340
+
- They primary key, typically "ID", shouldn't be included as a target attribute in your attribute mappings.
341
341
- The role attribute typically needs to be mapped using an expression, rather than a direct mapping. See section above for more details on role mapping.
342
342
- While you can disable groups from your mappings, disabling users isn't supported.
0 commit comments