Blocker with Microsoft Entra ID Idp because of Groups with non direct users as its member

SonarQube
1

Hello,
We are running a Sonarqube Enterprise Edition Version 10.3 (build 82913) and currently setting up Microsoft Entra ID Idp as a SAML authentication.
Now there’s a blocker with respect to How to setup Azure AD adding Groups.
We have a nested Global AAD Group which essentially means that a Global Group has multiple AAD Groups has its direct members.
Upon adding a Global AAD Group and testing the configuration we get an error below with a reason that “the signed user is blocked because they are not a direct member of a group with access, nor had access directly assigned by an administrator”.
I flipped that and added my user details explicitly and the test returned successfully.
Unfortunately we can’t assign users directly neither can we add an AAD Group with users as its direct member.
What are my options/What would you advice?
Thanks.

2

Hey Dipo,

Why not? It sounds like that’s what Entra is requiring in order for your users to be able to login, not SonarQube.