User's management in Datasphere

[rogerio_santos]

Hello all

I have a situation in project I'm working on regarding Azure-AD manage users and Datasphere control.
We have SAML configured and it's working fine, all new users included in Azure AD groups are generated automatically in DataSphere as expected.

However, I'm facing with problem when the user is excluded from AD groups in Azure. I did not see how the same user is excluded from DataSphere.
Does any one has the same problem and of course any thoughts for a solution?

[TuncayKaraca]

Hi @rogerio_santos,

I don't think Custom SAML Identity Provider, in your case Azure-AD, of SAP Datasphere support off-boarding the users. So you should go to Security > Users and delete the user manually.

Regards,
Tuncay

[rogerio_santos]

That's the point, this is requirement of audit team, there are some peoples that start and finish a project and when they are gone, Azure-AD exclude automatically.

[rogerio_santos]

That's the point, this is requirement of audit team, there are some peoples that start and finish a project and when they are gone, Azure-AD exclude automatically. I was thinking if there is any way through the CLI (started by some kind of trigger in AD) or something like that.

[TuncayKaraca]

Yes, CLI Manage Users via the Command Line seems to be one option to automate some on SAP Datasphere side.  I don't know about AD side.