SailPoint Entra ID Provisioning Error - Exchange Attribute / Shared Mailbox / Distribution and Mail-Enabled Security Group Provisioning is only applicable during Update

Identity Security Cloud (ISC) ISC Discussion and Questions
, ,
1

Hi Everyone,

We are facing an issue with SailPoint provisioning to Entra ID. The account creation is completing successfully; however, while assigning entitlements, we are encountering the following error:

“Exchange Attribute / Shared Mailbox / Distribution and Mail-Enabled Security Group Provisioning is only applicable during Update.”

It appears that these Exchange-related attributes or group memberships cannot be provisioned during the Create operation and may require an Update operation instead.

Has anyone experienced this issue before? If so, could you please share the root cause and how you resolved it?

Thanks in advance!

2

@Swapna_Sarit the Exchange online attributes can be aggregated only during full aggregation. Please check the documentation Exchange Online Management where it’s mentioned about it.

image
image1857×142 20.3 KB

Hope this helps.

3

Hi @Swapna_Sarit Can you confirm all Exchange type attributes (not entitlements) are prefixed with EXO_ in the account create profile and that all Exchange type Entitlements are marked as Entitlements in schema?