Currently, Recast Application Workspace supports syncing users and groups from Entra ID.
However, this functionality is an "all-or-nothing" approach, meaning it also imports guest users, which is not desirable.
To maintain a clean and organized workspace in Application Workspace, it would be beneficial to have the ability to filter the import process and only sync users, excluding guest accounts.
Proposed Solution
We request the addition of an option to specify a dynamic user group in Entra ID. A dynamic user group is a group populated based on specific expressions in Entra.
Application Workspace can then use the Graph API to fetch and import only the users that belong to this group.
Furthermore, when a user no longer meets the criteria for the dynamic group, the user should be archived or removed from Application Workspace to keep the system up to date and prevent unnecessary data from being retained.
Benefits:
Cleaner user management within Workspace Control
Excludes guest accounts from being imported
Easier to maintain an up-to-date user base
More flexible and granular control over which users are synced to Application Control
We hope this feature can be implemented to enhance the functionality and usability of the Application Workspace.
| Product | Application Workspace |
Currently, the Liquit Workspace App supports syncing users and groups from Entra ID. However, this functionality is an "all-or-nothing" approach, meaning it also imports guest users, which is not desirable.
To maintain a clean and organized workspace in Liquit, it would be beneficial to have the ability to filter the import process and only sync users, excluding guest accounts.
Proposed Solution:
We request the addition of an option to specify a dynamic user group in Entra ID. A dynamic user group is a group populated based on specific expressions in Entra. Liquit can then use the Graph API to fetch and import only the users that belong to this group.
Furthermore, when a user no longer meets the criteria for the dynamic group, the user should be archived or removed from Liquit to keep the system up to date and prevent unnecessary data from being retained.
Benefits:
Cleaner user management within Liquit
Excludes guest accounts from being imported
Easier to maintain an up-to-date user base
More flexible and granular control over which users are synced to Liquit
We hope this feature can be implemented to enhance the functionality and usability of the Liquit Workspace App.
User and group filtering on/in the Identity Source.
When you connect Microsoft Entra ID as a identity source all users and all groups are synchronised. With the current settings even the guest account in a tenant are synchronised to Application Workspace
We would like to apply a filter or select users and groups to synchronise to Application Workspace
When en Entra ID sync is setup all groups and users are synced to Application Workspace.
We would like to select usergroups to sync, so only the users we want are available in Application Workspace.
AzureAD identity source de mogelijkheid geven om gebruikers en/of groepen binnen te halen obv een filter, zodat niet alle gebruikers en/of groepen zichtbaar/beschikbaar zijn in de zone.
@Prudvee,
Thank you for your response. That's strange, because the documentation for the delta queries says the following:
Scoping filters allow you to track changes to one or more specific users or groups, filtering only by object ID. For example, the following request returns changes for the groups matching the IDs specified in the query filter.
https://learn.microsoft.com/en-us/graph/delta-query-overview#:~:text=Scoping%20filters%20allow%20you%20to%20track%20changes%20to%20one%20or%20more%20specific%20users%20or%20groups%2C%20filtering%20only%20by%20object%20ID.%20For%20example%2C%20the%20following%20request%20returns%20changes%20for%20the%20groups%20matching%20the%20IDs%20specified%20in%20the%20query%20filter.
It should be nice if we can select a group to filter.
Microsoft does not support this functionality in delta sync at the moment.