Approvals (AD vs Entra)

Question

I am experiencing a problem with approvals in a hybrid environment with Active Directory and Microsoft Entra that is synchronized.

If I request to be added to a AD Group, approval shows for my approving user account when browsing Adaxes.

If I request to be added to a Entra Group, approval does not show for my approving user account when browsing Adaxes.

Is this possibly because when I login to Adaxes to approve I am always and automatically logged on as my AD user account and therefore cannot see the approvals for Entra AD because it is tied to my Entra user account despite being the one and same identity?

Edit: Just found out that I have in fact asked about this in the past in https://www.adaxes.com/questions/13709/how-to-deal-with-approval-requests-in-ad-and-aad-environment and I am curious in that case if this is still not fixed or has a work-around?

Answer 1

Hello Daniel,

The feature was introduced in Adaxes 2025.1. If an on-premises user logs in into Adaxes and there are existing approval requests where the synchronized Microsoft Entra account is approver, the requests will be displayed.

Comments

Great news in that case. I am using version 3.17.23627.0 and I am not seeing any pending approvals related to Microsoft Entra when logged on the the web interface. I do see the ones related to Active Directory.

---

Hello Daniel,

To help us troubleshoot the issue, please, send us (support@adaxes.com) a copy of the Adaxes event log in EVTX format. For information on how to view the log, have a look at the following help article: https://www.adaxes.com/help/ServiceEventLog.