Child endpoints in an AzureAD connection

[DanJ]

Hi all

I have a question about AzureAD connection and child endpoints.

We hide our main ADSI-connected endpoint from ARS, and make extensive use of the ENDPOINTS_FILTER in our ADSI connector, then we make only the resulting child endpoints requestable. Is there a similar procedure for AzureAD-connected endpoints? There is no ENDPOINTS_FILTER in the connection config. If we just create child endpoints with appropriate entitlements will it all magically sync OK?

[rushikeshvartak · Accepted solution]

ENDPOINTS_FILTER  works similar way. and config should be there in connection if its missing you can add 

connections --> Connection Type LIst - Search "AzureAD" , Add in the end by comma separated 

Connection Attributes as Comma Separated :

CLIENT_ID,CLIENT_SECRET,ACCESS_TOKEN,AAD_TENANT_ID,AZURE_MGMT_ACCESS_TOKEN,AUTHENTICATION_ENDPOINT,MICROSOFT_GRAPH_ENDPOINT,AZURE_MANAGEMENT_ENDPOINT,CREATEUSERS,WINDOWS_CONNECTOR_JSON,CREATE_NEW_ENDPOINTS,ACCOUNT_ATTRIBUTES,ENTITLEMENT_ATTRIBUTE,DELTATOKENSJSON,ACCOUNT_IMPORT_FIELDS,ConnectionJSON,CreateGroupJSON,UpdateGroupJSON,DeleteGroupJSON,AddAccessJSON,ENTITLEMENT_FILTER_JSON,RemoveAccessJSON,CreateTeamJSON,CreateChannelJSON,STATUS_THRESHOLD_CONFIG,ACCOUNTS_FILTER,PAM_CONFIG,ENDPOINTS_FILTER,ConfigJSON

[DanJ]

great, that's fixed it thanks 🙂