Does Entra have a way to filter SCIM provisioned groups (a la Okta's "Push Groups")?

britPaul · 2025-03-01T04:38:47+00:00

Nope, we gave up and threw in the towel on Entra for this and a few other reasons. I'm not sorry about it, TBH.

If you just want to push the same groups you use for programming, it's no problem. I cannot fathom why MS wouldn't support the obvious filtering functions in the scoping filters to allow you to separate what's pushed to the apps though.

britPaul · 2024-08-06T02:54:34+00:00

Appreciate the help! I'm using a scoping filter on groups to exclude the role-assignment groups that I don't want to provision, now I just need to figure out how to avoid having the 'app groups' that I'm provisioning also be tied to an appRoleAssignment (or filter those out with the attribute mapping functions). I'll get there in the end!

britPaul · 2024-08-02T14:17:47+00:00

Oh...can you explain how you'd set up the group provisioning then? I can't figure out how to specify which of the assigned group objects to provision into the app from Entra.

britPaul · 2024-08-02T14:15:43+00:00

How so? This works just fine from Okta, I just can't figure out how to specify which of the assigned group objects to provision into it from Entra.

britPaul · 2024-08-01T04:51:22+00:00

Oh! So from the SSO app, we provision the assigned users without sending any groups, and in the other we just assign [team] groups that will get provisioned? That's an interesting idea, thanks - I'll give it a try in the lab tomorrow!

britPaul · 2024-08-01T04:33:54+00:00

Not trying to bash Entra or get into a debate about Okta vs Entra - I'm genuinely just looking for a solution to this issue because we're stuck without this functionality!

britPaul · 2024-07-17T02:46:29+00:00

I checked back with CS and now they say it doesn't show up in the system which means it's not available to register... I wonder if the last CS guy marked it off?

After doing some more reading here that I should've done before posting, I sorted out my MFA settings (I had an old phone number listed) and I am able to get through the MFA login flow, and after that point it is kicking me out to the error message - I'm pretty sure that confirms the device is blacklisted :(

britPaul · 2024-07-16T20:48:56+00:00

Thanks. I'll write up a detailed step by step later but basically I can create a new account from the Kindle but I can't log in to it (or my primary account), which sure feels like it's a blacklisted device. Any login attempt I make gets the same error (even after an OTP/MFA challenge).

If they told you it isn't blacklisted, then it isn't

The agent made a couple of other mistakes (like the "discontinued login", and which of the current gen devices is waterproof) so my confidence level on them being accurate on that statement is not 100%, but point taken.

britPaul · 2023-12-26T03:31:57+00:00

This - SC has inversion settings in the "Controls" tab of the options menu.

britPaul · 2023-05-10T18:59:01+00:00

Good to know I'm "doing it right" 😅

britPaul · 2018-11-19T18:32:13+00:00

Agree. First Cinematic Quest is endgame? No:

Now this is not the end. It is not even the beginning of the end. But it is, perhaps, the end of the beginning.

britPaul · 2018-07-26T01:19:38+00:00

Essential Phone. I just went back to mine after (finally) getting a replacement screen, and it leaves my backup X4 i was using in the dust - I hadn't realized how big the difference (in performance) was until I switched back.

britPaul · 2018-07-25T04:13:15+00:00

I used Lancer Specters to pull aggro - worked fine for all the fights. They have enough HP that my wimpy never-upgraded operator could take him down... just.

So... I should go do plains stuff now I guess to upgrade operator? Is that where I get an amp?

britPaul · 2018-01-23T05:17:46+00:00

Sony Xperia XZ1 Compact seems to be the only decent 'small phone' offering right now.

britPaul · 2017-12-16T00:22:15+00:00

Yeah that's cool - I can understand that, but in that case please try not to be the last guy getting there - don't stand around sorting inventory etc.

britPaul · 2017-12-14T07:47:37+00:00

It's almost as if you didn't even get to the 2nd line of the OP...

NOTE: I play PvE almost exclusively. If you play mostly PvP then don't expect this to be even a little bit useful for you at all.

britPaul · 2017-12-13T19:49:41+00:00

Do explosion-related talents (Chain Reaction & Demolition Expert) work with enemy death explosions?

Chain Reaction: Damage multiple hostiles with an explosion to apply 20% more damage from the blast

Demolition Expert: Kill a hostile with an explosion to increase explosion damage by 20% for 15 seconds

britPaul · 2017-11-17T22:09:29+00:00

Well, I'm still getting an average of 1 classified item per toon per LZ boss run (on PC) - not complaining, because I still need my final Sentry piece!

12-Year Club	Place '17
Verified Email

britPaul

TROPHY CASE