Staying Involved
Cato Professional ServicesHello,
Have you checked that the users not syncing have all the required attributes such as
Email, User Principal Name (UPN), given name, and surname?
Are you using a custom UPN other than the Azure default?
If this is a migration from LDAP you may also want to check for conflicts.
Do the CMA event logs or audit and provisioning logs in the enterprise app shed any additional insight as to what the issue is?
Use the "Provision on Demand" to force the sync of a problem user and then check these logs.
Staying InvolvedYes earlier LDAP integration was done but now LDAP Directory Services is deleted and only SCIM method is used for integration. There are almost 126 users out of 4000+ users who are present in Azure AD but not reflecting in CMA due to which I am unable to assign SDP license to these 126 users. There are also some cases where I found that 1 user who is member to 3 Groups in Azure AD but reflecting under only 1 group in CMA.
