Forum Discussion

Deleted

Sep 04, 2017

Azure AD Sync to On-Prem AD

Hello, I have Azure AD with about 50 users. These users were made when we purchased Office365. Let's say domain on Azure AD is example.com. (username@example.com) Locally, we use on-prem AD to auth...

Azure Active Directory (AAD)

MVP

Sep 04, 2017

Hi Januka,

You can use your public domain that is registered on Azure AD in your on-premises AD changing the UPN of the users to that domain and then match the email.

To acomplish that you have to add a new domain in "Active Directory Domains and Trusts"

https://technet.microsoft.com/en-us/library/cc772007(v=ws.11).aspx

After this change your UPN and email of your users to match the username of Azure AD.

Then Install AD Connect and when you enable it it will softmatch your user.

Be carfully of this steps and if you need any help please tell.

Deleted
Sep 04, 2017
"You can use your public domain that is registered on Azure AD in your on-premises AD changing the UPN of the users to that domain and then match the email."

Is it okay to use public domain internally? My understanding is that you should not use resolvable domain names internally?
If that is okay, then I will have equal usernames on both on-prem AD and Azure AD.

When I use AD Connect, will it automatically softmatch ?And will it sync passwords FROM Azure AD to On-Prem AD or other way around?
- NunoAriasSilva
  MVP
  Sep 05, 2017
  Hi Januka,
  
  You only will change the UPN, not the public domain internaly, just the way the user login on Office 365.
  When AD Connect will softmatch the password is from AD, you source of identity will be AD not Azure AD.
  
  You have to setup the AD Connect, just do a scope to a few test users and after you see how it works, send communications to the end users that after date/hour x their passwords on Office 365 will be the same that are from AD.