Assigning groups to Enterprise Applications in Azure

Question

Hello!

Im trying to assign groups onto an enterprise application for SSO authentication but I have noticed that it only find security groups, not distribution groups?

If I try to assign a distribution group by entering the full email address it interacts with it like if its going to send an invite to a guest.

So my question is.. does Azure only allow groups to be added to an Enterprise application ONLY if its a security group?

Many thanks in advance!

//Lennart

---

Lennart!

Answer 1

As with any other security-related tasks, the object you are assigning should be security principal. DGs are not, neither are Office 365 Group. Use a "regular" security group, mail-enabled one, or one with dynamic membership (not dynamic DG).

Answer 2

Hello Manoj!

So I guess I can just change the DG I need to Security instead of Distribution and use it to allow access to this App that I need in Azure.

And from what Ive read that shouldn't break the email functionality on the DG.

Thanks Manoj!

Regards,

Lennart

---

Lennart!