Entra ID connector too many requests

IdentityIQ (IIQ) IIQ Discussion and Questions
, ,
1

Hi everyone,

I recently created an application definition in IIQ 8.4 for Entra ID to aggregate user accounts, focusing specifically on MFA attributes. Since I don’t require groups, roles, or service principals, I excluded those attributes to reduce the number of API calls to Entra.

However, I’m encountering frequent warnings and errors such as “Too Many Requests,” “Retrying request for URL…,” and “Request will be retried after: 10000ms.” It appears Entra enforces strict rate limits. While the connector does support request retries, it eventually stops retrying, which is particularly problematic for MFA attributes—these end up being incorrectly removed from the link object.

Is anyone else running into this issue? Is there a way to configure throttling or better manage request pacing? Microsoft seems to document the rate limits clearly, but there doesn’t appear to be a built-in mechanism to respect them. It feels counterintuitive that the connector continues sending requests and repeatedly hits these errors.

Regards,
Pieter.

2

Anyone else running into this issue?

3

Do you want to share your application definition?

4

Sure, here it is!

EntraIdApplicationDefinition.xml (33.6 KB)

5

I wonder if defining the aggregations to be partitioned will help. Can also try leaving the default page size of 500. i.e.

<entry key="userPartitions">
                  <value>
                    <List>
      	            <String>startswith(userPrincipalName,'a')</String>
      	            <String>startswith(userPrincipalName,'b')</String>
      	            <String>startswith(userPrincipalName,'c')</String>
      	            <String>startswith(userPrincipalName,'d')</String>
      	            <String>startswith(userPrincipalName,'e')</String>
      	            <String>startswith(userPrincipalName,'f')</String>
      	            <String>startswith(userPrincipalName,'g')</String>
      	            <String>startswith(userPrincipalName,'h')</String>
      	            <String>startswith(userPrincipalName,'i')</String>
      	            <String>startswith(userPrincipalName,'j')</String>
      	            <String>startswith(userPrincipalName,'k')</String>
      	            <String>startswith(userPrincipalName,'l')</String>
      	            <String>startswith(userPrincipalName,'m')</String>
      	            <String>startswith(userPrincipalName,'n')</String>
      	            <String>startswith(userPrincipalName,'o')</String>
      	            <String>startswith(userPrincipalName,'p')</String>
      	            <String>startswith(userPrincipalName,'q')</String>
      	            <String>startswith(userPrincipalName,'r')</String>
      	            <String>startswith(userPrincipalName,'s')</String>
      	            <String>startswith(userPrincipalName,'t')</String>
      	            <String>startswith(userPrincipalName,'u')</String>
      	            <String>startswith(userPrincipalName,'v')</String>
      	            <String>startswith(userPrincipalName,'w')</String>
      	            <String>startswith(userPrincipalName,'x')</String>
      	            <String>startswith(userPrincipalName,'y')</String>
      	            <String>startswith(userPrincipalName,'z')</String>
                 	  </List>
                 </value>
       </entry>