Aggregation Settings

This section contains the configuration parameters for aggregation and filter settings.

For more information about aggregation, refer to Loading Account Data.


This is the companion discussion topic for the documentation at https://documentation.sailpoint.com/connectors/saas/msentraid/help/saas_connectivity/microsoft_entra_id/aggregation_settings.html

Hello, I have been attempting to utilize a group filter within my Azure AD (entra) source. The goal is to filter out on-prem groups. Since we are a hybrid environment, these are managed in our on-prem AD source.

We are seeing 2 issues.

  1. ‘supportsAdvancedGroupFilter’’ is true, but when using the Group Filter’ ‘onPremisesSyncEnabled ne true’ aggregations fail stating “Response Code - 400 Error - 400 Filter operator ‘NotEqualsMatch’ is not supported.“

  2. The documentation states “When configuring the filters, consider that the connector prioritizes account filters over group filters during aggregation. For example, the connector aggregates groups, which fall outside of the group filter, if the group is associated with an account included within the account filter.“ This leads me to wonder if the group filtering will work. The on-prem groups are populated by active users.

Does anyone have success with applying group filters?