function readOnly(count){ }
Starting November 20, the site will be set to read-only. On December 4, 2023,
forum discussions will move to the Trailblazer Community.
+ Start a Discussion
Michael YorkeMichael Yorke 

Azure Provisioning > Public Groups

Hello. 

I am looking for some guidance on provisioning users into existing Salesforce Public Groups. 

We currently have provisioning setup and working well. We provision from Azure AD to Salesforce putting users in the correct Salesfroce Profile, setting their TimeZone, Locale, and other attributes.
 

We are now starting to use Profile Groups in Salesforce and I would like to automatically add users to various Profile Groups, based off the  Azure group membership. Can someone advise of the syntax to use?

The catch is that users will need to be in more than one Public Group. This is easy to do on my side - I will create and manage membership of similarly named groups in Azure AD. I would like to know how to sync membership of these Azure AD groups to Salesforce Public Groups.

When looking at Azure AD provisioning > Attribute Mappings > Create Mapping > I don't see any options related to Public Groups in the 'Target Attribute' drop-down list. See https://i.imgur.com/Q4MKyFd.png

Perhaps I first need to create the attribute by clicking the 'Show Advanced Options' check box (below the list of already configured mappings), then click 'Edit attribute list for salesforce.com. However, doing this, I'm not sure what to add to select as the 'type' or what else to put in the other fields. See https://i.imgur.com/KRTekix.png

Here is the info I found on referencing Public Groups. https://developer.salesforce.com/docs/atlas.en-us.object_reference.meta/object_reference/sforce_api_objects_group.htm

Any help is greatly appreciated!
 

SySParlemSySParlem
Hi Michael,

I have the same issue, did you solve it?, any information will be welcome!
Thank you.
Michael YorkeMichael Yorke
Nope. I didn't solve it. I am manually adding new users into Public Groups. However, I do recall watching a keynote about an upcoming release which mentioned enhancements to either Profile Groups or Permission Sets - I forget which one - that enables users to be added to them via "rules" effectively, which would solve this problem. If I come across the video again, I'll link it here.
SySParlemSySParlem
Hi, Michael

Thank you for answering and the help.
I'll be working on it also, if I found something, I'll post it.

Regards!
Michael YorkeMichael Yorke
I searched again but still can't find the video I watched a few months back. It was related to Winter '24 release, which is rolling out later this year. IT was a slick Salesforce video, a live presentation of the upcoming release and had guest product managers speaking, including Cheryl Feldman who I think I recall is the PM for this particular feature. She also featured in the Winter '23 release, for which I did find a video (https://youtu.be/rYGrWt44sxQ?t=1515). 

Anyway, I did manage to find some links to this new Winter '24 feature which I am hoping solves our problem somewhat... 

Official Salesforce: 
https://help.salesforce.com/s/articleView?id=release-notes.rn_permissions_user_access_policy_filters.htm&release=246&type=5

Blog: 
https://automationchampion.com/2023/08/15/salesforce-winter24-release-quick-summary-2/#:~:text=You%20can%20reference%20a%20total,Select%20User%20Access%20Policies.
SySParlemSySParlem
Hi, Michael,

Thanks for all the information! I will check all the info, and if I found something I'll post it, but with a quick view maybe we should wait until next winter.....

 Regards!