u/size0618

We’re a hybrid environment using cloud sync. I’ve got a single user who during SAML authentication isn’t sending group memberships to the connected enterprise application. I’ve confirmed this using SAML-Tracer in the browser. I’ve compared this account to others and can’t see anything different except that the user in question has no “user type” in Entra where every other user in the tenant has “member.” I’m not sure if this is the issue or not, but it’s the only difference. Anyone seen anything like this before?

Edit: the fix https://www.reddit.com/r/entra/comments/1vp2ffn/comment/p3uy8jp

I've fought this issue all day and cannot figure it out.

We've got SCIM enabled with Entra.

I've got a role group created in CSE called "staff" and I've assigned a role attribute by group membership to that role (the group is an Entra group).

The user in question is a part of the Entra group which is assigned to that role attribute group.

I can navigate to any user profile in CSE and immediately see that they've been granted that role except the single user in question.

I've confirmed that the user exists inside the Entra group numerous times. I don't know what else to check.

Any ideas on what I'm missing? As a result this user cannot login.

Edit: we’ve confirmed that Entra seems to not be sending the group memberships. So it’s an Entra issue but given it’s only one user out of around 90, I’m not sure why.

I submitted a ticket asking a general question and the AI Assistant responds asking me to complete 10 questions before we could proceed. I responded that I didn’t think answering those questions was relevant to my initial inquiry and the AI Assistant responded yet again with an even longer response.

How do you actually speak to an engineer now?

We're using CSE Global Edge. I noticed in the CSE Private Access page there's a "Public Include Info" area which says: "Which Public Domains do you want to route through this network?"

I just wanted to clarify how this works. Given that we're using the global edge network, if we public a public domain in this area, that will mean that traffic hitting that domain will appear to be coming from the CSE Global Edge network of IPs, correct?

If we have a public website that we only want to allow access to from our public office IP, this area wouldn't accomplish that because we're sending the traffic through the CSE Global Edge Network? In theory, we could adjust permissions on our public website to block access unless it's coming from the Global Edge Network of IPs, but then unless I'm missing something, anyone using the global edge network would be able to access that public website once they were connected to CSE.

Am I correct in this?

Given that we're using the global edge network, I think the only way we can make traffic appear to come from our public IP is to configure the routes in the sonicwall connector and then configure the source NAT rule to make CSE traffic to those routes look like it's from our public office IP.

I noticed last week that people were sending messages in Teams, but I wasn't getting notified on my mobile phone. This was when I was away from my laptop. I then discovered that the "block notifications when active on other devices" setting was enabled. Turning that off allowed me to receive notifications again on my cell phone, but of course now I'm getting them even when I'm actively in a conversation with someone on my laptop. I'm almost certain that prior to last week, the way this feature worked was to only block notifications on the phone when Teams was actually open on the laptop. If it's minimized or the screen is locked, then it will send to mobile phone. It's not doing that now.

Anyone else noticed this change or am I crazy?

I'm trying to replace some hardware for my shower. Delta has sent me some replacement part but told me the escutcheon plate isn't something they'll warranty replace. I've removed the old and noticed the old seal looks pretty grimy and needs to be replaced. Delta told me I can just buy some waterproof sealant and do it myself although I'm not exactly sure how? Should I scrap off the old grimy seal on the backside of the plate and apply sealant there? Or should I just try to clean the old seal the best I can, place the plate back on the wall, and then use the sealant around the outside edge of the plate? Or both?

Inside Defender > Policies and Rules > Threat Policies > Preset Security Policies, I discovered that we have "build in protection" enabled, but "standard" and "strict" disabled.

I've done some googling but am still a little confused on if we need to enable "standard" (as a starting point) and what, if any, adverse effects that may have on our tenant?

I guess I'm not clear on what enabling Standard would give us. We already have some threat polices enabled configured for things like anti-spam, anti-malware, etc. If I enable "Standard" protection, is that going to override any custom policies? Or just add to them?

Hello,

Not sure what my goal is with this post except maybe to just get some positive vibes and hopefully some reassurance.

Wife had a colonoscopy last week and had a 2cm polyp in her rectum that came back cancerous. Doctor said it had breached the rectal wall and APPEARED to have affected three lymph nodes, but that he couldn't be certain of that, and those lymph nodes could be inflamed as a result of the colonoscopy she just had a couple days prior to the MRI. That said, the fact that three lymph nodes showed anything means they're treating it like it has affected them.

The doctor said the initial plan will be Total Neoadjuvant Therapy and then hopefully that will allow her to avoid surgery after the treatments are complete. He also said some sort of board will discuss this plan today to ensure everyone agrees and is on the same page with treatment.

Needless to say our minds have been all over the place. One second, I feel like I'm positive and the next my mind can only consider the negative. I can only imagine what my wife is going through.

Anyone have a Spica 3 and figure out the ideal ball hardness setting? With the latest firmware update, there's various ball hardness options under "normalization" setting: soft, medium soft, medium, firm, and hard.

The problem is, I'm not sure which to use. Wish they'd just present options like "range ball, "premium ball," etc. They also updated the carry number on the monitor itself to show "Carry (RAW)" which seems to be a couple or so yards different than the carry the Golfjoy Pro app shows. I'm not sure if the RAW carry number is supposed to show the adjusted yardage based on the type of ball or what the goal is given it's always different than what the iOS app shows.

Anyone figured this out?