Understand how Application Provisioning in Microsoft Entra ID

Publisher

Microsoft

URL

https://learn.microsoft.com/en-us/entra/identity/app-provisioning/how-provisioning-works

Published

2026-02-05

Updated

unknown

Accessed

2026-09-30

HTTP status

200

License

Microsoft Learn content; CC BY 4.0 for documentation text per MicrosoftDocs; no-redistribution; short excerpts and locators only

Source notes citing this source

• Entra ID hard-deletes users 30 days after soft deletion, at which point the provisioning service sends a delete to the target app. in context
• The Entra provisioning service cannot read or provision users in nested groups; only immediate members of an assigned group are provisioned. in context
• Every operation run by the Entra provisioning service is recorded in the Microsoft Entra provisioning logs, which are the place to diagnose failed users. in context
• An Entra provisioning job with consistent target errors enters quarantine, runs at most daily, and is disabled if it stays in quarantine more than four weeks. in context
• The Entra provisioning service disables a user in the target app via an update when the user is unassigned, goes out of scope, or is disabled or soft-deleted in Entra ID; for SCIM apps a disable sets active to false. in context

Cite this source record

APA

WarmTransfer. (2026, February 5). Understand how Application Provisioning in Microsoft Entra ID. WarmTransfer. https://warmtransfer.net/knowledge/sources/ms-learn-entra-how-provisioning-works

BibTeX

@misc{warmtransfer-ms-learn-entra-how-provisioning-works,
  title  = {Understand how Application Provisioning in Microsoft Entra ID},
  author = {{WarmTransfer}},
  year   = {2026},
  url    = {https://warmtransfer.net/knowledge/sources/ms-learn-entra-how-provisioning-works},
  note   = {Microsoft, accessed 2026-09-30}
}