Skip to content
New issue

Have a question about this project? Sign up for a free GitHub account to open an issue and contact its maintainers and the community.

Sign up for GitHub

By clicking “Sign up for GitHub”, you agree to our terms of service and privacy statement. We’ll occasionally send you account related emails.

Already on GitHub? Sign in to your account

Adding note to Entra ID #6584

Merged
merged 3 commits into from
Dec 4, 2024
Merged

Adding note to Entra ID #6584

Changes from 1 commit
Commits
Show all changes
3 commits
Select commit Hold shift + click to select a range
51a5b53
Adding note to Entra ID
matthewshaver Dec 3, 2024
4dcd8e5
Update website/docs/docs/cloud/manage-access/set-up-sso-microsoft-ent…
matthewshaver Dec 3, 2024
63380c5
Merge branch 'current' into entra
matthewshaver Dec 4, 2024
File filter

Filter by extension

Filter by extension
Conversations
Failed to load comments.
Loading
Jump to
Jump to file
Failed to load files.
Loading
Diff view
Diff view
7 changes: 7 additions & 0 deletions website/docs/docs/cloud/manage-access/set-up-sso-microsoft-entra-id.md
View file
Open in desktop
Original file line number Diff line number Diff line change
Expand Up @@ -61,6 +61,13 @@ Depending on your Microsoft Entra ID settings, your App Registration page might

### Azure <-> dbt Cloud User and Group mapping

:::important

There is a [limitation](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-group-claims#important-caveats-for-this-functionality) in the number of groups Azure will emit (capped at 150) via the SSO token, meaning if a user belongs to more than 150 groups, it will appear as though they belong to none. To prevent this, configure [group assignments](https://learn.microsoft.com/en-us/entra/identity/enterprise-apps/assign-user-or-group-access-portal?pivots=portal) with the dbt Cloud app in Azure and set a [group claim](https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/how-to-connect-fed-group-claims#add-group-claims-to-tokens-for-saml-applications-using-sso-configuration) so Azure emits only the relevant groups.
matthewshaver marked this conversation as resolved.
Show resolved Hide resolved

:::


The Azure users and groups you will create in the following steps are mapped to groups created in dbt Cloud based on the group name. Reference the docs on [enterprise permissions](enterprise-permissions) for additional information on how users, groups, and permission sets are configured in dbt Cloud.

### Adding users to an Enterprise application
Expand Down
Loading