Azure Government Endpoint Configuration

Important
When SailPoint CAM is enabled for MS Entra connector that uses GCC High, ensure azure-management-resource-base attribute is set to https://management.usgovcloudapi.net so that group aggregation works correctly.

To meet security and compliance needs of federal agencies, state and local governments, Microsoft provides a separate instance of the Azure service. A few example of such instances are Azure Government, Azure China. As these instances are separated from general Azure services, endpoint (host address) for such instances might also be different.

With endpoint configuration functionality, the Microsoft Entra ID connector can be configured to communicate with these instances.

The following attributes must be configured in the application Debug page:

Base resource URL to be used for Microsoft Graph API rest calls.

The following example points base to default Microsoft Graph resource base:

<entry key="msGraphResourceBase" value="https://graph.microsoft.us"/>

Base token URL to be used to get access token for Microsoft Graph API rest calls

The following example points base to default Microsoft Graph token base:

<entry key="msGraphTokenBase" value="https://login.microsoftonline.us"/>

Note
The actual values of endpoints can be found in Microsoft documentation for specific instance. For connector operation, the values for the above attributes must be provided.