Syncing guest from Azure with IdP to Qlik Sense Cloud gives error

[JoakimP]

Hi,

We are trying to sync a guest in our tenant to Qlik Sense Cloud but get the status "Failure" when it gets to step 4 in Azure Enterprise applications and gives us this: 4. Provision User in customappsso.

If we check Troubleshooting & Recommendations in the Enterprise application we get the following:

Details

Error code
SystemForCrossDomainIdentityManagementServiceIncompatible

Error message
StatusCode: BadRequest Message: Processing of the HTTP request resulted in an exception.
Please see the HTTP response returned by the 'Response' property of this exception for details.
Web Response: {"traceId":"911c230634b482870cd648f4d6df5a39","schemas":
["urn:ietf:params:scim:api:messages:2.0:Error"],"status":400,"detail":"Bad Request","scimType":"invalidValue"}
This operation was retried 3 times. It will be retried again after this date: 2024-04-05T04:59:34.3328091Z UTC

We have tries to activate the Multitenant in the application in Azure but this did not help.

I'm looking in Qlik Sense Cloud panel and see Collaboration platforms. Maby this could be it?

To sum it up.

We have invited an external user as a guest in our tenat and are trying to sync this account to our Qlik Sense Cloud so the guest can use their email and password to login and check som reports.
Is this possible?

Thanks,

Kinds regards
Joakim

[jeremypope]

Hi, not sure if this will help, but we found that one of the mappings (for name.formatted) needed correcting.  The expression was "Join(" ", [givenName], [surname])" and these values were empty in Entra ID.  Sometime in the last month or so this became untolerated and resulted in the invalidvalue error.  We updated this mapping to be direct using displayName, which we were populating and 149 guest accounts immediately provisioned.

[JoakimP]

Hi,

Is there a possibility for you to past in a screenshot of the expression so it's easier to see what you have updated.

Our expresion looks like this at the moment, as it states in the guides from Qlik.

Thanks!

[jeremypope · Accepted solution]

This is what we set our mapping to:

We've had no errors in provisioning since then and all our users seem to be properly provisioned.

[JoakimP]

Hi,

Finally!
Now we can sync over our guests and they can log in.

Thanks jeremypope!

For future reference, this is how ours looks today.