Entra ID Provision is Getting Failure

Identity Security Cloud (ISC) ISC Discussion and Questions
1

Hi,
I am currently working on provisioning users to Microsoft Entra ID from SailPoint Identity Security Cloud (ISC) and encountering the following error during the provisioning process.

**sailpoint.connector.ConnectorException: Exception occurred. Error message - HTTP not ended OK. Response Code - 404 Error - Resource ‘’ does not exist or one of its queried reference-property objects are not present.

Context
**
Source: Microsoft Entra ID

  1. Platform: SailPoint Identity Security Cloud (ISC)

  2. Operation: User provisioning (Create)

  3. Connector: Microsoft Entra ID connector

  4. The provisioning request fails with the above error during execution.

    **
    Could someone Help me on this, it will be good Helpful**

2

Hi @gbalag This error typically indicates that while the “Create” operation is triggered, the underlying Microsoft Graph API request is referencing an object (such as a manager, department, license, or group) that doesn’t exist or isn’t accessible in the target Entra ID tenant.
Are you attempting to assign a manager or any group memberships as part of this initial “Create” operation?

3

@Deepak_Chaudhary , I am trying to add group membership at initial creation.

4

Hi @Deepak_Chaudhary, any idea above error, please let me have any solution above error :slightly_smiling_face:

5

HI @gbalag

This is happening due to the given reasons:
Incorrect Attribute Mapping: If you are passing a group name or UPN instead of the Object ID (GUID), Entra ID will return a 404 because it expects the specific resource identifier.
Group Type Limitation: Distribution groups, Mail-Enabled Security groups, and Microsoft 365 groups often cannot be assigned during the initial Create operation; they must be managed via an Update operation after the user account exists.
Entitlement Sync Issue: If the group was recently created in Entra ID and has not yet been aggregated into SailPoint, the connector may fail to reference it correctly during the provisioning call.
Are you trying to assign a standard Security Group or an M365/Distribution group?