Skip to Main Content
Status Will not implement in the near future
Categories Other
Created by Rico Roodenburg
Created on May 28, 2025

Support for reducing/filtering the number users/groups for the Azure AD Identity Source

Currently, Recast Application Workspace supports syncing users and groups from Entra ID.
However, this functionality is an "all-or-nothing" approach, meaning it also imports guest users, which is not desirable.

To maintain a clean and organized workspace in Application Workspace, it would be beneficial to have the ability to filter the import process and only sync users, excluding guest accounts.

Proposed Solution

We request the addition of an option to specify a dynamic user group in Entra ID. A dynamic user group is a group populated based on specific expressions in Entra.
Application Workspace can then use the Graph API to fetch and import only the users that belong to this group.

Furthermore, when a user no longer meets the criteria for the dynamic group, the user should be archived or removed from Application Workspace to keep the system up to date and prevent unnecessary data from being retained.

Benefits:

  • Cleaner user management within Workspace Control

  • Excludes guest accounts from being imported

  • Easier to maintain an up-to-date user base

  • More flexible and granular control over which users are synced to Application Control

We hope this feature can be implemented to enhance the functionality and usability of the Application Workspace.

Product Application Workspace
  • Attach files
  • Rico Roodenburg
    Jun 3, 2025

    Currently, the Liquit Workspace App supports syncing users and groups from Entra ID. However, this functionality is an "all-or-nothing" approach, meaning it also imports guest users, which is not desirable.


    To maintain a clean and organized workspace in Liquit, it would be beneficial to have the ability to filter the import process and only sync users, excluding guest accounts.


    Proposed Solution:


    We request the addition of an option to specify a dynamic user group in Entra ID. A dynamic user group is a group populated based on specific expressions in Entra. Liquit can then use the Graph API to fetch and import only the users that belong to this group.


    Furthermore, when a user no longer meets the criteria for the dynamic group, the user should be archived or removed from Liquit to keep the system up to date and prevent unnecessary data from being retained.


    Benefits:


    Cleaner user management within Liquit

    Excludes guest accounts from being imported

    Easier to maintain an up-to-date user base

    More flexible and granular control over which users are synced to Liquit

    We hope this feature can be implemented to enhance the functionality and usability of the Liquit Workspace App.

  • Guest
    Jun 3, 2025

    User and group filtering on/in the Identity Source.

    When you connect Microsoft Entra ID as a identity source all users and all groups are synchronised. With the current settings even the guest account in a tenant are synchronised to Application Workspace


    We would like to apply a filter or select users and groups to synchronise to Application Workspace

  • Guest
    Jun 3, 2025

    When en Entra ID sync is setup all groups and users are synced to Application Workspace.

    We would like to select usergroups to sync, so only the users we want are available in Application Workspace.

  • Guest
    Jun 3, 2025

    AzureAD identity source de mogelijkheid geven om gebruikers en/of groepen binnen te halen obv een filter, zodat niet alle gebruikers en/of groepen zichtbaar/beschikbaar zijn in de zone.

  • Rico Roodenburg
    May 28, 2025

    @Prudvee,

    Thank you for your response. That's strange, because the documentation for the delta queries says the following:

    Scoping filters allow you to track changes to one or more specific users or groups, filtering only by object ID. For example, the following request returns changes for the groups matching the IDs specified in the query filter.

    https://learn.microsoft.com/en-us/graph/delta-query-overview#:~:text=Scoping%20filters%20allow%20you%20to%20track%20changes%20to%20one%20or%20more%20specific%20users%20or%20groups%2C%20filtering%20only%20by%20object%20ID.%20For%20example%2C%20the%20following%20request%20returns%20changes%20for%20the%20groups%20matching%20the%20IDs%20specified%20in%20the%20query%20filter.

    It should be nice if we can select a group to filter.

  • Admin
    Prudvee Raj
    May 28, 2025

    Microsoft does not support this functionality in delta sync at the moment.