We’re trying out AAD app provisioning (salesforce, but it shouldn’t matter). 5 users assigned, via a group. I’ve read the couple articles Microsoft has published on this topic. Based on what’s documented, plus what I’ve observed, the approach to AAD app provisioning seems to be that for the initial provisioning sync, some provisioning process must touch every user and group to evaluate if they are both assigned and in scope. Once that initial sync is complete, the documentation suggests that subsequent syncs are “smarter”. Our AAD tenant has almost 900K users and 30K+ groups. The guidance says that for “large” tenants, the initial provisioning may take hours.
We’ve been running the initial provisioning for 43 hours now. Based on the audit logs and other indications in the portal, the provisioning process is definitely still working. The tools and documented guidance clearly can’t give me good expectations on how long this will take. I’m wondering if there are any other tenants of approximately our size which have done an AAD app provisioning, and if so, how much time it took for that initial provisioning run. Thanks, Brian Arkills