I want to aggregate users where userPrincipalName ends with certain string(endsWith(userPrincipalName,‘-c@domain.onmicrosoft.com’)). But I am getting below error while aggregation. Exception occurred in Iterate Objects. Error message - sailpoint.connector.ConnectorException: Exception occurred in …

Hi @Amrit1897 That first link includes the detail that you can’t use endswith filter together with selecting the manager attribute, and recommends removing the manager attribute from the schema.

Along with userPrincipalName ends with certain string filter. Is it possible to aggregate users which are part of a certain group?

Is it possible to aggregate users which are part of a certain group and userPrincipalName ends with certain string?

Hello, In order to aggregate the records belonging to specific Group, you can use Group Membership Filter as per documentations. [image] Note that it only supports couple of Group Types withing Azure and Not all of them. Regards, Rohit Wekhande.

I am using below filter condition. [image] Accounts gets aggregated by this user filter and it satisfies group filter condition in a way. Basically user filter pulls all user with object type as ApplicationRole. With group membership filter it adds object type as group with the user. But I want …

Can anyone please suggest on this?

I don’t think this will be possible. From what I understand about Microsoft Graph and the Azure connector: The connector first grabs all the Users, and uses the User Filter. That first list of users doesn’t contain the groups that the Users are in. The connector takes the list of users and do…

If you are using the Virtual Appliance Azure connector, you could try to add an account.filterString attribute to the source config via API. [image] IdentityNow Account Filtering during Account Aggregation Overview Often there is a need to filter accounts on a source during an account …

@Carlatto , Thanks for the suggestion I have applied both the removed group membership filter. But only user filter works properly below filter does not work as expected. “account.filterString”: “(groups.contains(\“groupName\”))”, I have places filter inside connectorAttributes. Can you please su…

Make sure you have an ! before the (groups.contains(\”groupname\”)), so it should be ”account.filterString”: “!(groups.contains(\“\”))” The filter is kind of opposite of how a lot of filters work. (groups.contains(\”groupname\”)) will remove all accounts that contain the groupname. So you have to…

Azure AD connector user filter issue

Identity Security Cloud (ISC) ISC Discussion and Questions

rohit_wekhande (Rohit Wekhande) August 25, 2025, 10:00am 5

Hello,

In order to aggregate the records belonging to specific Group, you can use Group Membership Filter as per documentations.

Note that it only supports couple of Group Types withing Azure and Not all of them.

Regards,

Rohit Wekhande.

Topic		Replies	Views
Azure AD source user filter ISC Discussion and Questions identity-security-cloud , connectors	6	425	July 26, 2024
Azure AD User Filter- Need to Aggregate users from particular group ISC Discussion and Questions aggregation , identity-security-cloud	5	1004	June 4, 2024
Aggregation, Filter, and Partitioning Settings Connectivity Documentation Feedback va-con-docs , microsoft-con-docs	2	144	September 10, 2024
Azure AD Connector - endsWith Filter Fails When Manager Attribute Is Present ISC Discussion and Questions identity-security-cloud , connectors	14	102	March 23, 2026
Azure Group Filter ISC Discussion and Questions aggregation , identity-security-cloud	11	355	November 9, 2024

Azure AD connector user filter issue

Related topics