Forum Discussion
Sync users from tenant A to tenant B both ways
I would personally avoid using the "resource tenant" pattern if there are only two tenants in the picture, I like simplicity.
I am not aware of any plans to decommission MIM as a product but anyway, if I were you, I would explore the Scripted collaboration option and use e.g. Azure Functions (PowerShell) to implement this "push" automation using Delta Query.
- The biggest challenge for "Do it yourself" scenario is to detect new or deleted objects in those two directories, especially for deleted objects. You either have a separate "internal" store that keeps track of objects (accounts) you synchronized previously (like Azure AD Connect has "metaverse") or you always need to query all objects and compare them across the directories.
If you are looking for a simple solution, I agree with Vasil you should look for a third-party tool.- Hi Vasil, David,
Thanks a lot for your answers!
Do you have any points to add also for the more difficult scenario, such as the synchronized collaboration?
I have found a short description in the following article on global tenant topology when using synchronized collaboration on B2B https://aka.ms/multi-tenant-users but they mention a sync engine such MIM is used.
I hope I understand correctly, but now that you've mentioned Azure Connect metaverse, are you by any chance aware if it could be used for sync between cloud only tenants as sync engine?Hi ramonabadea ,
I believe that AAD Connect uses MIM synchronization engine "under the hood" but the tool doesn't work for cross AAD tenant sync. If you choose to use MIM, as long as you have AAD P1 or P2 licenses (and a Windows Server OS license), you should be able to use it: https://azure.microsoft.com/en-us/pricing/details/active-directory/
The "Multi-tenant User Collaboration Patterns..." whitepaper talks about three distinct scenarios with different solutions. From your initial description I would think that the "Scripted collaboration" scenario (with Delta Queries, and MS Graph) would be a good fit for you, unless you require more advanced feature for M365. Or have you concluded you need those advanced features?
