Group Assigned to Entra App

This procedure outlines how the system handles user provisioning and role assignment when a group is assigned to the Entra SCIM application. When a group is assigned to the Entra SCIM App:

• Entra triggers a POST /Users request for each user in the group. This results in the creation of the user in Campaign Manager with a placeholder role, as the group membership is not yet reflected.

• Entra follows up with a PATCH /Groups/{id} request using:

  {
    "op": "Add",
    "path": "members",
    "value": [{ "value": "<userEmail>" }]
  }

• After receiving the group membership update, Campaign Manager replaces the placeholder role with the actual group name, which becomes the user’s assigned role in Campaign Manager.