Provision on demand sends one user to Freshservice right now, so you can test a change without waiting for the next sync.

Problem

You changed a mapping, a scope or a token, and you want to know if it works. Waiting for the next cycle (about 40 minutes) is too slow, and you do not want to sync everyone.

Cause

Microsoft Entra ID syncs on a schedule. Use Provision on demand to test a single user.

Steps

  1. Sign in to the Microsoft Entra admin centre.
  2. Go to Enterprise applications > Freshservice Provisioning > Provisioning.
  3. Click Provision on demand in the top tabs.
  4. Choose the user and click Provision.
  5. Read the result of each step. If a step fails, open it. The details show the reason.
  6. Check the user in Freshservice.

Good to know

  • The user must be in scope. If nothing happens, check Users and groups, the scope setting and the scope filters.
  • For a manager, provision the manager first and then the direct report.
  • A second result that says RedundantExport is not an error. It means the first request already updated the user.
  • Provision on demand does not support groups.
  • Use Provision on demand instead of removing the app or unassigning users. Those actions can create duplicate users.
  • Test one user after every mapping change, before you restart provisioning for everyone.

Sources

  • Microsoft: On-demand provisioning in Microsoft Entra ID