Azure AD OOTB Connector - ENDPOINT FILTER OPTIONS

[ssudhakar]

HI Team,

We have requirement to onboard application in Saviynt based on Azure AD Group and we are exploring all possibilities on the filter conditions.

as per the Azure AD documentation (https://docs.saviyntcloud.com/bundle/AzureAD-v2022x/page/Content/Configuring-the-Integration-for-Acc...)

below are the 3 examples

{
"APPLICATION_DEV": [
{
"AADGROUP": [
"GROUP_IN_ENGG",
"GROUP_IN_FINANCE",
"GROUP_IN_MARKETTING"
]
}
]
}

{
"APPLICATION_QA": [
{
"AADGROUP": [
"group%"
]
}
]
}

{
"APP1": [
{
"AADGROUP": [
"GROUP_IN_ENGG",
"GROUP_IN_FINANCE",
"GROUP_IN_MARKETTING"
]
}
],
"APPLICATION_QA": [
{
"AADGROUP": [
"group%"
]
}
]
}

What we want to understand is what are other option available other than mentioning direct group name/displayname or group name string subset.

1. Any options to use objectGUID/Immutable ID 
2. Any options to use group level attributes(standard and extension) for filter

Regards,
Sudhin Sudhakar

[rushikeshvartak]

There is no other option refer below post

https://forums.saviynt.com/t5/identity-governance/endpoints-filter-on-customproperty/m-p/33307#M1842...

https://ideas.saviynt.com/ideas/EIC-I-4577