Contents
No, hierarchies cannot be synchronized.
If you want to synchronize groups that have hierarchies in IdP to Acall, please be sure to check the following before start provisioning.
- Explicitly assign all groups in the hierarchy to your app.
- Edit groups on Acall to set up the hierarchy.
- Deleting a group in the hierarchy will also delete the groups on its lower level on Acall.
Explicitly assign all groups in the hierarchy to your app
For example, when assigning groups to apps for provisioning, even if only the top-level group “Sales & Marketing Division” is assigned, information of the groups on lower level “Sales Division” and “Sales Team A” will not be synchronized to Acall.
Please explicitly assign not only the top-level group “Sales & Marketing Division”, but also the groups on lower lever “Sales Division” and “Sales Team A” to the application.
💡 Note
This relies on a Microsoft specification that does not allow provisioning of nested groups.
Reference: How Application Provisioning works in Microsoft Entra ID
Edit groups on Acall to set up the hierarchy
For example, if you synchronize a three-level group such as Sales & Marketing Division > Sales Division > Sales Team A with Acall, the levels will not be reflected in Acall and all three groups will be synchronized as independent top-level groups.
IdP | Acall | |
3 levels Hierarchical groups
|
→ |
No hierarchy, all independent groups
|
After groups created by provisioning, edit the groups on Acall to set up the hierarchy.
See “Change Group Hierarchy” for more information on how to edit a group and set the hierarchy on Acall.
💡 Note
The hierarchies set up on Acall are not reflected in the Entra ID through the synchronization process of provisioning.
Deleting a group in the hierarchy will also delete the groups on its lower level on Acall
If the top-level group “Sales & Marketing Division” is deleted on the IdP, the groups on lower level “Sales Division” and “Sales Team A” will also be deleted on Acall.
It is necessary to edit the group in advance on Acall to delete the hierarchical structure before deleting the group.
For more information, please refer to “Is there anything I should be aware of when changing groups in IdP due to organizational changes? ".
Comments
0 comments
Article is closed for comments.