How to fetch assigned licensed properties with Azure AD connector

IdentityIQ (IIQ) IIQ Discussion and Questions
1

Hi Sailors,

We have integrated SailPoint with Microsoft Entra ID using the Microsoft Graph API. Currently, we are unable to retrieve detailed assigned license information for users.

Although we configured the assignedLicenses attribute in SailPoint as a multi-valued managed entitlement, the limitation is that we do not have a dedicated assignedLicenses schema with expanded properties. Because of this, SailPoint only captures the SKU IDs and does not retrieve additional metadata.

As a result, we are unable to determine key properties of license assignments, such as whether a license is:

  • Directly assigned, or

  • Inherited through group-based licensing

Does anyone have any idea or workaround to differentiate whether an assignedLicense is directly assigned or inherited?

2

There is separate endpoint that can provide the license details. Have you tried it?

You will need additional call to this API to get license details

3

@bhoyars_1 This seems to be a connector limitation. If you really want these attributes, you may need to use Group Refresh rule or use a webservice connector to achieve this. For web services, you would need the APIs which you can integrate with IIQ.

4

Try adding licenseAssignmentStates as multi valued to the schema, which will contain the attribute assignedByGroup which if null then the license assignment is direct.