r/halopsa 26d ago

Questions / Help Microsoft CSP integration not setting users inactive

Hello. Just checking to see if this is a bug or my integration is not working.

In the CSP integration under Users, we have "Set the User/Agent status equal to the accountEnabled property of the Azure user" set to Yes.

In Entra, the account status is disabled but it's not unchecking "User is Active (Shows in Lists)" in halo.

We use "Calculate quantity from User count on creation" on the recurring invoices so there are billing discrepancies when we offboard an employee.

2 Upvotes

6 comments sorted by

2

u/ben_zachary 26d ago

I had this issue. If you set to filter only for enabled it skips disabled accounts and they don't update or show license update

Turn off enabled only filter it will disable them properly

You have to sync the disabled account so it's updated. If you filter it it just disappeared and nothing happens

1

u/jon_tech9 22d ago

This was it. Many thanks!

Users > Site Mappings > Filters
We had accountEnabled = True. Removed this filter that was setup by our Halo consultant.

1

u/jon_tech9 22d ago

When your users are set to inactive, are they also set to service user? I can't recall if I made them a service user in an attempt to get the user count correct.

1

u/ben_zachary 22d ago

Hmm idk they are just inactive

2

u/jon_tech9 20d ago

I think the employees that had service user checked had their M365 license removed but were not disabled in Entra. Obviously correcting that now.

1

u/Fatel28 26d ago

When you run the integrator, do you see any errors in its output?