Skip to main content

We would like to sync existing user attributes like Job title and Manager from Personio to Office 365.

But we need to disable automatic user provisioning for new users and deprovisioning. Is there an option or possibility to disable this ? 

Currently in Personio , users of two tenants say A and B are being managed. We would like integration only for tenant A. So if a new user of  tenant B is added to Personio , it should not create new profile or user account in tenant A. Therefore we would like to disable automatic user provisioning.

Hi ​@Lakshmi K M, 

there is currently no option to turnoff the provisioning workflow for the integration with Microsoft Entra ID. However, there is a workaround available for your use case: 

  1. Create a custom attribute to be used for the UPN schema
  2. For the UPN schema in the settings of the Entra ID integration, choose “pre-assign email addresses” and select the custom attribute there.
  3. For users of tenant A, fill out this attribute with the UPN they want for this user (or leave it empty, if the automatic generation fits the schema they want anyway).
  4. For users of tenant B, fill out this attribute with an invalid value (for example, just @ and nothing else). This will lead to an error, effectively preventing the user being created in Entra ID. (Note: leaving the attribute empty is not enough, as the integration will fall back to the automatic generation).

Hope this helps! 🙂

Best, 
Christoph

Your reply


Terms & Conditions of the Personio Voyager Community