03 / APPLY THE DECISIONS Follow the identity across every boundary. Two Northstar investigations: a failed partner synchronization and a cautious AD FS-to-cloud migration with object-level Connect Health errors.
CASE 01 The partner account that won't provision 0/4 steps CASE 02 The AD FS retirement change 0/4 steps
NORTHSTAR SERVICES / IAM-502 IDENTITY TRUST INVESTIGATION
The partner account that won't provision Northstar is onboarding a partner company into a second Entra workforce tenant. Guests can sign in manually, but automatic synchronization fails.
STEP 1 OF 4 The target tenant is meant to receive B2B user accounts from Northstar. Who configures the provisioning job, and who grants permission? A The source pushes the job; the target permits inbound synchronizationB The target pulls all accounts without approvalC The partner's firewall provisions users through DNS
Continue investigation →
Restart this case ↺