Entra SSO and Provisioning in Salesforce

Meghan McCoy 0

We are going to turn on provisioning users between our Entra instance and Salesforce.

The issue is we want users to be created with profile chatter free.

We will change their profile based on their role manually.

When Entra seeks to update any changed attribute on the user record however it is also trying to change their profile and then throwing an error ErrorCode: FIELD_INTEGRITY_EXCEPTION ErrorMessage: Changing user type from Standard to Chatter Free is not allowed. Select a different profile. This operation was retried 0 times.

Anyone aware of how to set Entra to not modify profile on update action?

Thank you.

Meg

Marilee Turscak-MSFT 35,116 Reputation points Microsoft Employee

2024-05-21T23:05:24.85+00:00
@Meghan McCoy ,

If I understand correctly what you're looking to accomplish, you could turn off the synchronization for few attributes from Entra ID connect sync:

Open the "Synchronization Service Manager", and then "Connectors" tab,

Right-click on Azure AD connector, select "Properties", switch to the "Select attributes" tab, check "Show all" box, find added attribute, unselect it and save.
Meghan McCoy 0 Reputation points

2024-05-22T17:39:19.1833333+00:00

Thank you Marilee, you mean that doing so would allow say Title, Email and Name to be updated but give us the option to turn off update for license type?

Share via

Entra SSO and Provisioning in Salesforce