Entra ID User Federation Group Filter Update Guide (23.x to 24.1) [Prep GEN]

The document outlines the steps and considerations necessary to update the group filter syntax for Entra ID used in AuthService from version 23.x to 24.1.

The syntax for Group Filter in 24.1 is changed from using “;” as a separator of the specified groups to using the OData Format. Hence, it is necessary to update the syntax to follow the OData format.

Using the OData format allows for more flexible group filtering, such as filtering for groups that start with prefix and this flexibility can be quite useful in various scenarios.

CODE

startsWith(displayName, 'TestGroup')

The following section shows the syntax used in both versions 23.x and 24.1:

Version 23.x:

CODE

TestGroup1;TestGroup2;TestGroup3

Version 24.1:

CODE

displayName eq 'TestGroup1' or displayName eq 'TestGroup2' or displayName eq 'TestGroup3'

Please refer to Entra ID Filter Query Operator for more ways to utilize the OData format to filter the groups.