From 122bc02a23410e44245e8007192ecb766c8071b0 Mon Sep 17 00:00:00 2001
From: Bryan Frimin <bryan@probo.com>
Date: Thu, 28 May 2026 14:56:54 -0700
Subject: [PATCH] Fix too much account on MS365 access review

Signed-off-by: Bryan Frimin <bryan@probo.com>
---
 pkg/accessreview/drivers/microsoft_365.go | 6 ++++++
 1 file changed, 6 insertions(+)

diff --git a/pkg/accessreview/drivers/microsoft_365.go b/pkg/accessreview/drivers/microsoft_365.go
index f5d16b8eb..9e5ea9cdb 100644
--- a/pkg/accessreview/drivers/microsoft_365.go
+++ b/pkg/accessreview/drivers/microsoft_365.go
@@ -148,6 +148,12 @@ func (d *Microsoft365Driver) ListAccounts(ctx context.Context) ([]AccountRecord,
 			email = u.UserPrincipalName
 		}
 
+		// Skip accounts without any usable identifier so the access
+		// review only lists real members, matching the SCIM bridge.
+		if email == "" {
+			continue
+		}
+
 		userRoles := rolesByUser[u.ID]
 		isAdmin := false