Frost EagleField notes on Microsoft Entra ID Governance and HR-driven provisioning: how a person gets from the HR record to the right access, and what breaks along the way.https://frosteagle.com/628 users in AD, 180 in Entra, and one account that belonged to two peoplehttps://frosteagle.com/articles/628-in-ad-180-in-entra/https://frosteagle.com/articles/628-in-ad-180-in-entra/Two small mistakes in a lab provisioning pipeline: a UPN expression that left spaces in, and an employee ID shared by two people. One hid most of my users. The other quietly merged two identities.Fri, 30 Oct 2026 00:00:00 GMTMoving custom attributes from Connect Sync to Cloud Sync? Check which app they belong tohttps://frosteagle.com/articles/connect-cloud-sync-extension-attributes/https://frosteagle.com/articles/connect-cloud-sync-extension-attributes/A custom AD attribute synced into Entra ID gets a name that includes the ID of an app. Change sync engines and you can end up with a new app, a new name, and every rule that used the old one quietly pointing at nothing.Fri, 30 Oct 2026 00:00:00 GMTWhy your Logic App can't set a hybrid user's first passwordhttps://frosteagle.com/articles/hybrid-first-password-graph/https://frosteagle.com/articles/hybrid-first-password-graph/Graph will happily change a synced user's password from automation. The change just never reaches Active Directory, and the new starter is left with a password that doesn't work.Fri, 30 Oct 2026 00:00:00 GMTThe 204 that does nothing: resuming Lifecycle Workflows from a second Logic Apphttps://frosteagle.com/articles/lcw-callback-204-does-nothing/https://frosteagle.com/articles/lcw-callback-204-does-nothing/A Lifecycle Workflows resume call can come back 204 No Content and still leave the task waiting. If a different identity is sending the callback, that is very likely why.Fri, 30 Oct 2026 00:00:00 GMTFollowing a new starter from payroll to Entra ID, one hop at a timehttps://frosteagle.com/articles/payroll-to-entra-hop-by-hop/https://frosteagle.com/articles/payroll-to-entra-hop-by-hop/A walk through a hybrid HR-driven provisioning pipeline: what each hop does to a person's record, and where each one tends to break.Fri, 30 Oct 2026 00:00:00 GMT