search

MicrosoftDocs / azure-docs

Open source documentation of Microsoft Azure
https://docs.microsoft.com/azure
Creative Commons Attribution 4.0 International
10.31k stars 21.5k forks source link

Provide support for mapping manager #107464

Closed fernando-almeida-sprinklr closed 1 year ago

fernando-almeida-sprinklr commented 1 year ago

Please provide support or document example on how to assign managerId

Document Details

⚠ Do not edit this section. It is required for learn.microsoft.com ➟ GitHub issue linking.

Naveenommi-MSFT commented 1 year ago

@fernando-almeida-sprinklr Thanks for your feedback! We will investigate and update as appropriate.

ManoharLakkoju-MSFT commented 1 year ago

Hi @fernando-almeida-sprinklr You can find an example on how to assign managerId in the following tutorial. In this tutorial, you will learn how to configure automatic user provisioning from Azure AD to Salesforce. The tutorial includes a section on how to map the manager attribute in Azure AD to the managerId field in Salesforce. You can follow the steps in this section to assign managerId.

https://learn.microsoft.com/en-us/azure/deployment-environments/how-to-configure-managed-identity

fernando-almeida-sprinklr commented 1 year ago

The link you sent has nothing to do with what I asked nor does it provide any meaningful guidance on how to solve. Put simply in case it wasn't clear the provisioning service MS has built is not pulling the matching Salesforce user id to assign to the manager.

Fernando Almeida

From: ManoharLakkoju-MSFT @.> Sent: Friday, March 31, 2023 6:45:00 AM To: MicrosoftDocs/azure-docs @.> Cc: Fernando Almeida @.>; Mention @.> Subject: Re: [MicrosoftDocs/azure-docs] Provide support for mapping manager (Issue #107464)

Hi @fernando-almeida-sprinklrhttps://github.com/fernando-almeida-sprinklr You can find an example on how to assign managerId in the following tutorial. In this tutorial, you will learn how to configure automatic user provisioning from Azure AD to Salesforce. The tutorial includes a section on how to map the manager attribute in Azure AD to the managerId field in Salesforce. You can follow the steps in this section to assign managerId.

https://learn.microsoft.com/en-us/azure/deployment-environments/how-to-configure-managed-identity

— Reply to this email directly, view it on GitHubhttps://github.com/MicrosoftDocs/azure-docs/issues/107464#issuecomment-1491329967, or unsubscribehttps://github.com/notifications/unsubscribe-auth/A3WMEBOQDIAYW7R5HNSEF7LW6ZVNZANCNFSM6AAAAAAWNY7UZA. You are receiving this because you were mentioned.Message ID: @.***>

ManoharLakkoju-MSFT commented 1 year ago

@fernando-almeida-sprinklr I'm going to assign this to the document author so they can take a look at it accordingly

@jeevansd Can you please check and add your comments on this doc update request as applicable.

v-hgampala commented 1 year ago

@v-missam, can you please take a look at the issue?

fernando-almeida-sprinklr commented 1 year ago

thanks for pushing it forward... this not addressed and is part of the default attributes available for mapping. From my perspective it seems like the expected mapping to be defined for Azure AD manager is not properly doing the lookup in Salesforce for the matching user such that it can assigned the expected identifier.

From: HAMSIKA GAMPALA @.> Sent: Monday, April 10, 2023 4:59 AM To: MicrosoftDocs/azure-docs @.> Cc: Fernando Almeida @.>; Mention @.> Subject: Re: [MicrosoftDocs/azure-docs] Provide support for mapping manager (Issue #107464)

@v-missamhttps://github.com/v-missam, can you please take a look at the issue?

— Reply to this email directly, view it on GitHubhttps://github.com/MicrosoftDocs/azure-docs/issues/107464#issuecomment-1501362288, or unsubscribehttps://github.com/notifications/unsubscribe-auth/A3WMEBNRJ4T55BLOMD54C5DXAOAQJANCNFSM6AAAAAAWNY7UZA. You are receiving this because you were mentioned.Message ID: @.***>

v-missam commented 1 year ago

reassign:twimmers

v-missam commented 1 year ago

@twimmers - Could you please look into the managerId concern.

twimmers commented 1 year ago

@fernando-almeida-sprinklr You can map the manager attribute in Azure AD to the managerID attribute in Salesforce:

image

This should resolve the user in Salesforce and then populate the userID of the manager into the manageID attribute in Salesforce. If you're not seeing this happen, check to ensure the user and the user's manager are both in the sync scope. The manager needs to be in scope as well, otherwise it will fail to resolve the reference.

fernando-almeida-sprinklr commented 1 year ago

Hi Tom,

Thanks for getting back to me. After some additional tests it seems I was misreading a warning/error I was getting from the response which did not seem to initially be related. I've tracked it down to one of the developers having created a validation rule that was being enforced and causing the specific manager for the user I was testing to be rejected and even for users out of scope to not be able to be stripped of their manager.

Best, Fernando

From: Tom Wimmers @.> Sent: Tuesday, April 11, 2023 4:13 PM To: MicrosoftDocs/azure-docs @.> Cc: Fernando Almeida @.>; Mention @.> Subject: Re: [MicrosoftDocs/azure-docs] Provide support for mapping manager (Issue #107464)

@fernando-almeida-sprinklrhttps://github.com/fernando-almeida-sprinklr You can map the manager attribute in Azure AD to the managerID attribute in Salesforce: [image]https://user-images.githubusercontent.com/49566142/231206642-85a6efba-1864-48ff-bd36-7b6165e95db5.png This should resolve the user in Salesforce and then populate the userID of the manager into the manageID attribute in Salesforce. If you're not seeing this happen, check to ensure the user and the user's manager are both in the sync scope. The manager needs to be in scope as well, otherwise it will fail to resolve the reference.

— Reply to this email directly, view it on GitHubhttps://github.com/MicrosoftDocs/azure-docs/issues/107464#issuecomment-1503579810, or unsubscribehttps://github.com/notifications/unsubscribe-auth/A3WMEBLPE7SMSNVCWB7JQBDXAVYLDANCNFSM6AAAAAAWNY7UZA. You are receiving this because you were mentioned.Message ID: @.***>

v-missam commented 1 year ago

please-close