AzureAD Connector - Filtering for accounts having certain values not in UPN

[skaliyandil]

Hi All,

Is it possible to apply a filter on the OOTB AAD connector to import accounts which are not having certain substring values (more than one) in UPN?

Regards,

Satish

[Amit_Malik]

Hi @skaliyandil ,

I don't think Saviynt uses it's own filtering syntax or methods. It actually supports what MS graph APIs does.

Something like this could help (not (mail in ('mail1@domain.com', 'mail2@domain.com'))). You can read what Graph APIs support here - https://learn.microsoft.com/en-us/graph/filter-query-parameter?tabs=http

Just remember to replace space with %20 and ' with %27 when you use in Saviynt. SO above filter would become (not%20(mail%20in%20(%27mail1@domain.com%27,%20%27mail2@domain.com%27)))

Good Luck!! 

[skaliyandil]

Hi @Amit_Malik ,

Thanks for your response, Does it support wildcard characters as well? in our case we dont have the exact value for matching UPN.

Following filter with * as wild character is still returning all users.

$filter=not( userPrincipalName in('test1*','test2*'))

Satish

[Amit_Malik]

Hi @skaliyandil , worth trying what @rushikeshvartak has shared but if that doesn't work.

You may want to try Microsoft forums to find it out. It looks like graph API for users api might not support it. 

But in case , it is not supported in graph APIs, you can ask Azure team to have a script to update another attribute with constant values for the users that you need. But this is more on Microsoft side of things and less on Saviynt.

[rushikeshvartak]

(!(userPrincipalName=*substring1*) & !(userPrincipalName=*substring2*))