Hello! I have a customer preparing to include Office 365 (O365) entitlements in their access certification campaign. Currently, the O365 entitlements display many duplicates of native on-premise groups and built-in roles. To streamline the certification, they are aiming to limit the O365 source to o…

I spoke with @mcheek and he mentioned that the Microsoft entra connector just recently obtained an additional filter feature that allows you to filter out accounts and groups to avoid the duplicates. Check out step 5 in the filter settings about group membership filters. That’s the key to make sure …

Yep, see the announcement from Dinesh [image] Enhancement: Microsoft Entra Connector - Supporting Group Membership Filter and signInActivity! Product News Description bangbang The SailPoint Microsoft Entra (SaaS) and VA based Connector now provides a “Group Me…

So, we implemented the filter: onPremisesSyncEnabled ne true to exclude on-premise active directory groups from being aggregated into IdentityNow. However, after forcing both user and entitlement aggregation, we’re not seeing the on-premise groups be dropped from entitlements. Has anyone experienced…

ISC doesn’t clean-up its entitlement repositories even if the entitlements are no longer aggregated. You basically need to reset the source entitlements via API call and start fresh.

Hey Kevin, Do you know where I could find documentation for that API Call? Also, do you know if there is any end-user impact when you reset entitlements like that?

O365 displays duplicates in certification campagin

Identity Security Cloud (ISC) ISC Discussion and Questions

mcheek (Mark Cheek) April 23, 2025, 2:25am 3

Yep, see the announcement from Dinesh

Topic		Replies	Views
Enhancement: Microsoft Entra Connector - Supporting Group Membership Filter and signInActivity! Product News connectors , new-enhancement	14	1083	September 18, 2025
Azure AD Source - skipping entitlements that are synced from on prem ISC Discussion and Questions aggregation , entitlements	5	1691	July 19, 2023
IDN: Source Entitlement filtering only sometimes works? ISC Discussion and Questions identity-security-cloud	18	1352	May 6, 2024
EntraID Entitlement Aggregation (cloud vs. onpremise) ISC Discussion and Questions aggregation , identity-security-cloud , entitlements	4	75	March 16, 2026
Question: Handling Nested Azure M365 E5 Group Memberships That Appear as Entitlements in IDN ISC Discussion and Questions rules , identity-security-cloud , provisioning , entitlements	3	65	March 22, 2026

O365 displays duplicates in certification campagin

Related topics