Forum Discussion
Sync users from tenant A to tenant B both ways
Hi everyone,
I am trying to find an easy solution for the following scenario:
I have tenant A and tenant B.
I would like to sync or copy all the users from tenant A to tenant B as guests. Easy so far.
The main problem is that I would need that every time when a user from tenant A is removed to automatically be removed from tenant B as well.
Does anyone have any idea of how this could be achieved in an easy way?
Thank you,
Ramona
I would personally avoid using the "resource tenant" pattern if there are only two tenants in the picture, I like simplicity.
I am not aware of any plans to decommission MIM as a product but anyway, if I were you, I would explore the Scripted collaboration option and use e.g. Azure Functions (PowerShell) to implement this "push" automation using Delta Query.
- regarding Cross tenant Sync, check if user can use Office license from source tenant for all the activities on target tenant
- Can you actually detail a bit for what type of activities? It is an interesting scenario, for the moment we tested PowerBI, but it seems to be limited and you can't bring your own license from your "home" tenant. Did anyone else test any scenarios? 🙂
- A few years later from this post, Microsoft has finally released what we all needed!
For anyone who is hitting on this thread, please see THE EASY WAY:
https://learn.microsoft.com/en-us/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-overview- Better late than ever, right Ramona? 🙂
I like this new feature and we are planning to use it internally to sync between our PROD and DEV tenants.- Please take into consideration that this feature still under preview and Microsoft still enhancing it so make sure to test in your test environment prior deploying it into production
- The easy way would be to use third-party tools that specialize in this scenario. Those of course cost some $$$, so you might do it yourself instead via scheduled PowerShell scripts, Azure functions or whatever you preferred automation method is.
- The biggest challenge for "Do it yourself" scenario is to detect new or deleted objects in those two directories, especially for deleted objects. You either have a separate "internal" store that keeps track of objects (accounts) you synchronized previously (like Azure AD Connect has "metaverse") or you always need to query all objects and compare them across the directories.
If you are looking for a simple solution, I agree with Vasil you should look for a third-party tool.- Hi Vasil, David,
Thanks a lot for your answers!
Do you have any points to add also for the more difficult scenario, such as the synchronized collaboration?
I have found a short description in the following article on global tenant topology when using synchronized collaboration on B2B https://aka.ms/multi-tenant-users but they mention a sync engine such MIM is used.
I hope I understand correctly, but now that you've mentioned Azure Connect metaverse, are you by any chance aware if it could be used for sync between cloud only tenants as sync engine?
