'%3e%3cpath%20d='M8%200C12.4183%200%2016%203.58172%2016%208C16%2012.4183%2012.4183%2016%208%2016C3.58172%2016%200%2012.4183%200%208C0%203.58172%203.58172%200%208%200ZM11.6162%204.38379C11.2257%203.99337%2010.5927%203.99338%2010.2021%204.38379L8%206.58594L5.79785%204.38379C5.40732%203.99334%204.77429%203.99329%204.38379%204.38379C3.99331%204.77429%203.99335%205.40733%204.38379%205.79785L6.58594%208L4.38379%2010.2021C3.99348%2010.5927%203.99341%2011.2257%204.38379%2011.6162C4.77426%2012.0066%205.40734%2012.0065%205.79785%2011.6162L8%209.41406L10.2021%2011.6162C10.5927%2012.0066%2011.2257%2012.0067%2011.6162%2011.6162C12.0067%2011.2257%2012.0066%2010.5927%2011.6162%2010.2021L9.41406%208L11.6162%205.79785C12.0066%205.40735%2012.0066%204.77429%2011.6162%204.38379Z'%20fill='%23080E17'%20fill-opacity='0.46'/%3e%3c/g%3e%3cdefs%3e%3cclipPath%20id='clip0_3761_713'%3e%3crect%20width='16'%20height='16'%20fill='white'/%3e%3c/clipPath%3e%3c/defs%3e%3c/svg%3e)
Fix SharePoint SCIM Cannot Sync Everyone Except External Users Group
Question details
Users experience an issue where a SharePoint custom application synchronizes the federated 'Everyone except external users' group via SCIM but fails to retrieve its members.
- Product
- SharePoint
- Device & OS
- not provided
- Scenario
- Synchronizing a federated group through SCIM using a SharePoint custom application.
- Observed behavior
- The SCIM synchronization fails to retrieve members for the 'Everyone except external users' group, while other security groups sync correctly.
Ensure you have Microsoft 365 Administrator privileges and access to the Microsoft 365 Admin Center to view service logs and open official support tickets.
Open a Microsoft 365 Support Ticket
Since this involves Azure, SCIM, and tenant-level configurations, contacting Microsoft Support is the most direct way to resolve the backend sync failure.
Azure is likely not returning users for the federated group due to a service or integration issue. This requires investigation with access to tenant and service logs.
Navigate to the Microsoft 365 admin center using your administrator credentials.
Go to the 'Support' section on the left-hand menu, then select 'Help and support'.
Click on 'Contact support' to open a new ticket, providing details about the SCIM sync failure for the 'Everyone except external users' group.
Consult the SharePoint Developer Community
If your custom application requires specific integration guidance, the developer community can offer specialized troubleshooting steps.
Looking for a simpler document collaboration platform?
While complex SCIM and Azure integrations can cause synchronization bottlenecks in SharePoint, WPS Office provides a streamlined, lightweight, and completely free alternative for your team's document collaboration needs.
- 1. Download WPS Office: Visit the official WPS website to download the free suite.
- 2. Install and Launch: Run the installer and open the application on your preferred device.
- 3. Collaborate Instantly: Create or open documents and share them directly with your team using simple sharing links.
Frequently Asked Questions
Why does SCIM fail only for the 'Everyone except external users' group?
This specific group is a federated system group in SharePoint and Azure Active Directory. Custom SCIM applications often fail to retrieve its members because Azure may not expose these users in the same way it does for standard manually-created security groups.
Can the standard SharePoint community help with this SCIM issue?
The standard SharePoint community usually focuses on end-user issues. For custom application and SCIM integration problems, it is highly recommended to use the SharePoint Developer community or Microsoft Q&A for developer-level troubleshooting.
What logs are required to troubleshoot the SCIM sync failure?
You will need to collect both tenant-level Azure AD logs and the service logs from your custom SCIM application to identify where the user retrieval process is failing.
