Enhancement Request: Support Entra ID (Azure AD) Group Membership Sync into User Profiles via MS Graph Connector

Hello Moveworks Team,

We would like to request an enhancement to support importing specific Microsoft Entra ID (Azure AD) group memberships into Moveworks user profiles as custom attributes through the Microsoft Graph connector.

Current Environment

We are successfully ingesting users and user attributes from:

• ServiceNow
• Workday
• Microsoft Graph (Azure AD / Entra ID)

into Moveworks User Identity.

Our user ingestion processes are functioning correctly, and user profiles are being populated with standard user information.

Business Requirement

We have several custom business use cases that depend on a user's membership in a small set of Azure AD groups.

Examples include:

• Finance users
• Operations users
• Procurement users
• Snowflake access users
• Other business-specific entitlement groups

We are not requesting synchronization of all Azure AD groups for every user.

Instead, we only need support for a very limited number of specific groups (less than 5 groups).

The goal is to store group membership information as a custom user profile attribute that can later be used for:

• Personalized experiences
• User segmentation
• Conditional workflows
• Access control decisions
• Dynamic routing
• Snowflake integration use cases
• Custom plugin logic

Current Attempt

We attempted to retrieve Azure AD group membership via the Microsoft Graph connector and map it into a custom attribute (entraid_groups).

During testing, the backend identified that:

• memberOf returns a multi-valued array.
• Moveworks custom attributes currently expect a string value.
• This resulted in ingestion failures due to type mismatch.

Backend error observed:

custom_data field: expected string or bytes-like object, got 'list'

After investigation with support, we received confirmation that:

Ingesting Azure AD attributes such as memberOf is currently not supported using the MS Graph connector.

Business Impact

Without Azure AD group membership attributes available in user profiles, several identity-driven use cases cannot be implemented effectively.

This limitation currently impacts:

• Snowflake integration enhancements
• Role-based experiences
• Attribute-driven workflows
• Personalized service delivery
• Dynamic business process routing

Request to Product Team

Could the product team please evaluate support for Entra ID/Azure AD group membership ingestion as part of the Microsoft Graph connector roadmap?

We would appreciate feedback regarding:

1. Whether this functionality is already planned.
2. Any recommended workaround currently available.
3. Potential roadmap timelines if under consideration.

Thank you for your support.