Skip to main content
Answered

Disabling user provisioning and deprovisioning while connecting Personio to Microsoft Entra ID

  • February 19, 2025
  • 1 Antwort
  • 0 Aufrufe
L
Newbie

We would like to sync existing user attributes like Job title and Manager from Personio to Office 365.

But we need to disable automatic user provisioning for new users and deprovisioning. Is there an option or possibility to disable this ? 

Currently in Personio , users of two tenants say A and B are being managed. We would like integration only for tenant A. So if a new user of  tenant B is added to Personio , it should not create new profile or user account in tenant A. Therefore we would like to disable automatic user provisioning.

Beste Antwort von Christoph

Hi ​@Lakshmi K M, 

there is currently no option to turnoff the provisioning workflow for the integration with Microsoft Entra ID. However, there is a workaround available for your use case: 

  1. Create a custom attribute to be used for the UPN schema
  2. For the UPN schema in the settings of the Entra ID integration, choose “pre-assign email addresses” and select the custom attribute there.
  3. For users of tenant A, fill out this attribute with the UPN they want for this user (or leave it empty, if the automatic generation fits the schema they want anyway).
  4. For users of tenant B, fill out this attribute with an invalid value (for example, just @ and nothing else). This will lead to an error, effectively preventing the user being created in Entra ID. (Note: leaving the attribute empty is not enough, as the integration will fall back to the automatic generation).

Hope this helps! 🙂

Best, 
Christoph

1 Antwort

Christoph
Community Moderator
Forum|alt.badge.img+8
  • ChristophCommunity Moderator
  • Community Moderator
  • Antwort
  • July 31, 2025

Hi ​@Lakshmi K M, 

there is currently no option to turnoff the provisioning workflow for the integration with Microsoft Entra ID. However, there is a workaround available for your use case: 

  1. Create a custom attribute to be used for the UPN schema
  2. For the UPN schema in the settings of the Entra ID integration, choose “pre-assign email addresses” and select the custom attribute there.
  3. For users of tenant A, fill out this attribute with the UPN they want for this user (or leave it empty, if the automatic generation fits the schema they want anyway).
  4. For users of tenant B, fill out this attribute with an invalid value (for example, just @ and nothing else). This will lead to an error, effectively preventing the user being created in Entra ID. (Note: leaving the attribute empty is not enough, as the integration will fall back to the automatic generation).

Hope this helps! 🙂

Best, 
Christoph

Nutzungsbedingungen für die Personio Voyager CommunityAccessibility statement