Hey everyone, I just wrapped up a pretty intense three-month project at my company where we built a custom connector to sync identity data between SailPoint and Microsoft Entra ID. Since this subforum is all about real-world Entra experiences, I figured I'd share ours.
We have a complex hybrid environment, and the out-of-the-box options weren't cutting it for our specific provisioning workflows and custom SailPoint attributes. The goal was to get a near-real-time sync for user lifecycle events (joiner, mover, leaver) and keep group memberships in perfect harmony.
It was a deep dive into Entra's provisioning engine, SCIM endpoints, and SailPoint's APIs. We hit some major hurdles, like handling soft deletes and managing rate limits gracefully.
If you're considering a similar path or are just curious about the nitty-gritty, I'm here to help. Some things I can elaborate on:
* The decision points for going custom vs. using available tools
* The biggest technical challenges (spoiler: attribute mapping logic was a beast)
* Key security considerations for service principals and permissions
* How we structured the project to avoid downtime
* Whether I'd recommend doing it again 😅
Ask me anything about the process, the tech stack, or the pitfalls we found along the way.
Let the machines do the grunt work