Hi all Hope everyone is well. Please can someone assist me with the following question. We are in the process of creating a new staff on-boarding solution in AAD. This solution will create the user account in AAD as well. Is there anyway to sync this user information back down to local AD? Is there perhaps a third party app we can look at?? Appreciate any advice...

HiThere isn't any way to sync users back to AD from AAD natively.I don't know of any third party products.You could try to script this.But why are you creating the users in AAD in the first place?

Thijs Lecomte Because AAD is the way forward and leading identity management platform in all our current projects. Furthermore is it super easy to build a PowerApp for the customers so that HR can create new staff and have them land in the right teams with access to the right resources. #Its2019 🙂

Thijs Lecomte We are on the same page. That is what we are trying to do. But we still struggle with getting that scenario seamless AND passwordless. See my other post on getting SSO with on premises apps: https://techcommunity.microsoft.com/t5/Azure-Active-Directory/Azure-AD-Azure-Active-Directory-Domain-Services-amp-Windows/m-p/1004958 So simple concept, apparently so hard to do...

Sure, I am a big advocate of AAD. But if you are going that route, you should really go full-cloud and don't add your users to a local AD anymore.Just do a full AAD join and publish all your apps through App Proxies.

Sync from Azure AD to local AD | Microsoft Community Hub

Thijs Lecomte
Bronze Contributor
Nov 15, 2019
Hi

There isn't any way to sync users back to AD from AAD natively.

I don't know of any third party products.
You could try to script this.

But why are you creating the users in AAD in the first place?
- Emanuel van der Aalst
  Brass Contributor
  Nov 15, 2019
  Thijs Lecomte
  
  Because AAD is the way forward and leading identity management platform in all our current projects. Furthermore is it super easy to build a PowerApp for the customers so that HR can create new staff and have them land in the right teams with access to the right resources. #Its2019 🙂
  - Thijs Lecomte
    Bronze Contributor
    Nov 15, 2019
    Sure, I am a big advocate of AAD. But if you are going that route, you should really go full-cloud and don't add your users to a local AD anymore.
    
    Just do a full AAD join and publish all your apps through App Proxies.
- CloudHal
  Iron Contributor
  Nov 18, 2019
  Thijs Lecomte if you still need on-AD then you need to author all your accounts in AD, you should not have a JML creating some users in AD and some in AAD...
Oliver Moazzezi
Brass Contributor
Nov 18, 2019
Hi there,

Until there's native account write-back in AAD I would strongly recommend following AD>AAD.

I have some scripts to backport AAD accounts to AD if you would like them. I have them in a blog post on www.wave16.com, however you cannot fix the password issue and there's also the fact this isn't an ideal scenario.

Forum Discussion

Sync from Azure AD to local AD

Share

Resources