# Entra iD SaaS Exchange Management

**URL:** <https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648>\
**Category:** SHF Discussion and Questions\
**Tags:** identity-security-cloud, saas-connector, connectors\
**Created:** [March 10, 2025, 12:18pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648 "2025-03-10T12:18:53Z")\
**Posts on this page:** 9\
**Page:** 1

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [March 10, 2025, 12:18pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/1 "2025-03-10T12:18:53Z")

</div>

Hey Team,

I just activated the Exchange Feature for our Entra ID SaaS connector and am now a bit confused to how to set everything up correctly. The documentation I can find isn’t really sufficient for this case.

We need to manage distribution lists and shared mailboxes (provisioning/deprovisioning) specifically.

I am able to aggregate distriibution lists as type “Group” via the “Aggregate All Groups” checkbox, however it is not fetching shared mailboxes as entitlements. There is no documentation on how to set up new Entitlement Type:s for these type of objects, and the ones i have tried doesn’t work.

I am able to fetch the value of sharedMailbox on the account.

Preferrably I would like for distribution lists and shared mailboxes to have their own entitlement type’s, but having no success with this. Can someone shed some light?

---

<div class="post-metadata">

**Author:** ![David\_Norris](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@David\_Norris](https://developer.sailpoint.com/discuss/u/David_Norris)\
**Post date:** [March 10, 2025, 8:21pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/2 "2025-03-10T20:21:13Z")

</div>

For “their own entitlement type”, consider using metadata attributes.

As for the shared mailboxes’ entitlements, you don’t see any entitlement with names in the form of “`<Shared Mailbox name>: <Permission name>`”?

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [March 11, 2025, 8:49am UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/3 "2025-03-11T08:49:03Z")

</div>

Hello Terry,

By metadata attributes, what do you mean specifically?

I am able to see Shared Mailboxes when the attribute “sharedMailbox” is not of type “Entitlement” on the account schema. When checking this box I seem to not get anything at all.

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [March 11, 2025, 9:18am UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/4 "2025-03-11T09:18:45Z")

</div>

I would like to be able to aggregate shared mailboxes via “Entitlement Aggregation”, but then I must know how to set up the entitlement type, can’t find any documentation on this.

---

<div class="post-metadata">

**Author:** ![David\_Norris](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@David\_Norris](https://developer.sailpoint.com/discuss/u/David_Norris)\
**Post date:** [March 11, 2025, 1:34pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/5 "2025-03-11T13:34:42Z")

</div>

> **[Exchange Online Management](https://documentation.sailpoint.com/connectors/microsoft/entra_id/help/integrating_entra_id/exchange_online_mailbox_management.html)**
>
> SailPoint Connectors Documentation

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/b/3/b314552d12a688784e14028badcf94980e0f46df.png)

 ![image](https://global.discourse-cdn.com/sailpoint/original/3X/6/a/6a34f3e2c5f0833eba195b24482b1740201c47e8.png)

Metadata Attributes:

> **[Managing Metadata - SailPoint Identity Services](https://documentation.sailpoint.com/saas/help/access/metadata.html)**
>
> SailPoint Identity Services Documentation

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [March 11, 2025, 2:03pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/6 "2025-03-11T14:03:49Z")

</div>

Hello Terry, yes this is how we have configured it now and it works. However, this only lets us aggregate Shared Mailboxes via Account Aggregation, we need to aggregate all shared mailboxes via Entitlemenet Aggregation if possible.

---

<div class="post-metadata">

**Author:** ![David\_Norris](https://avatars.discourse-cdn.com/v4/letter/d/b9e5f3/32.png) [@David\_Norris](https://developer.sailpoint.com/discuss/u/David_Norris)\
**Post date:** [March 11, 2025, 2:05pm UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/7 "2025-03-11T14:05:32Z")

</div>

> [@Wegmannorth](#):
>
> we need to aggregate all shared mailboxes via Entitlemenet Aggregation if possible.

Don’t think you can change this aspect of the connector behaviour.

---

<div class="post-metadata">

**Author:** ![Wegmannorth](https://sea1.discourse-cdn.com/sailpoint/discuss/user_avatar/developer.sailpoint.com/wegmannorth/32/33587_2.png) [@Wegmannorth](https://developer.sailpoint.com/discuss/u/Wegmannorth)\
**Post date:** [March 27, 2025, 9:21am UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/8 "2025-03-27T09:21:17Z")

</div>

I have checked with SailPoint and this is not possible at this time. There are ideas up for this however.

---

<div class="post-metadata">

**Author:** ![system](https://global.discourse-cdn.com/sailpoint/original/2X/f/f2136700ed5e3703e0b85e02f6be799dacca7735.png) [@system](https://developer.sailpoint.com/discuss/u/system)\
**Post date:** [May 26, 2025, 9:21am UTC](https://developer.sailpoint.com/discuss/t/entra-id-saas-exchange-management/103648/9 "2025-05-26T09:21:50Z")

</div>

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.
