Hello,

In our environment we have multiple applications with application entitlements which are AD groups. 

We have one primary user identity. Users are able to request through web portal additional AD account but each from different domain, not from the…