10.4 Provisioning Behavior

Actions taken on users and groups in Active Directory might not be reflected in the SaaS applications. The following table lists the actions in Active Directory and the corresponding action in the SaaS applications.

Table 10-2 Provisioning Actions

Active Directory

SaaS Applications

Delete a user.

The SaaS accounts are disabled.

Remove a user from the authorized group.

The SaaS accounts are disabled.

Create a user.

Creates an account for the user in the SaaS applications, if the user is a member of group with mapped SaaS authorizations.

Move a user from out of the search context into the search context.

Creates an account for the user in the SaaS applications, if the user is a member of group with mapped SaaS authorizations.

Move a user out of the search context.

The SaaS accounts are disabled.