We would like to sync existing user attributes like Job title and Manager from Personio to Office 365.
But we need to disable automatic user provisioning for new users and deprovisioning. Is there an option or possibility to disable this ?
Currently in Personio , users of two tenants say A and B are being managed. We would like integration only for tenant A. So if a new user of tenant B is added to Personio , it should not create new profile or user account in tenant A. Therefore we would like to disable automatic user provisioning.
Best answer by Christoph S.
Hi @Lakshmi K M,
there is currently no option to turnoff the provisioning workflow for the integration with Microsoft Entra ID. However, there is a workaround available for your use case:
Create a custom attribute to be used for the UPN schema
For the UPN schema in the settings of the Entra ID integration, choose “pre-assign email addresses” and select the custom attribute there.
For users of tenant A, fill out this attribute with the UPN they want for this user (or leave it empty, if the automatic generation fits the schema they want anyway).
For users of tenant B, fill out this attribute with an invalid value (for example, just @ and nothing else). This will lead to an error, effectively preventing the user being created in Entra ID. (Note: leaving the attribute empty is not enough, as the integration will fall back to the automatic generation).
there is currently no option to turnoff the provisioning workflow for the integration with Microsoft Entra ID. However, there is a workaround available for your use case:
Create a custom attribute to be used for the UPN schema
For the UPN schema in the settings of the Entra ID integration, choose “pre-assign email addresses” and select the custom attribute there.
For users of tenant A, fill out this attribute with the UPN they want for this user (or leave it empty, if the automatic generation fits the schema they want anyway).
For users of tenant B, fill out this attribute with an invalid value (for example, just @ and nothing else). This will lead to an error, effectively preventing the user being created in Entra ID. (Note: leaving the attribute empty is not enough, as the integration will fall back to the automatic generation).
Hope this helps! 🙂
Best, Christoph
Saw something fishy? 👀
Here's what to do when you come across a topic or comment that you think should be reported.
If you are a Personio customer please use the same email address for registration as in your Personio account. By doing so we can help you faster if we might need to check something in your account.
Do you already have an account? > Login
! Your public username cannot contain any personal information such as email or other private information! You can't change your username after registration.
Welcome to the Personio Voyager Community!
This is our service and networking community for all Personio users and HR Professionals. If you have not registered yet, please select "create an account"
Enter your E-mail address. We'll send you an e-mail with instructions to reset your password.
Scanning file for viruses.
Sorry, we're still checking this file's contents to make sure it's safe to download. Please try again in a few minutes.
