Forum Discussion
Solved
Sync users from tenant A to tenant B both ways
Hi everyone, I am trying to find an easy solution for the following scenario: I have tenant A and tenant B. I would like to sync or copy all the users from tenant A to tenant B as guests. Ea...
I would personally avoid using the "resource tenant" pattern if there are only two tenants in the picture, I like simplicity.
I am not aware of any plans to decommission MIM as a product but anyway, if I were you, I would explore the Scripted collaboration option and use e.g. Azure Functions (PowerShell) to implement this "push" automation using Delta Query.
The biggest challenge for "Do it yourself" scenario is to detect new or deleted objects in those two directories, especially for deleted objects. You either have a separate "internal" store that keeps track of objects (accounts) you synchronized previously (like Azure AD Connect has "metaverse") or you always need to query all objects and compare them across the directories.
If you are looking for a simple solution, I agree with Vasil you should look for a third-party tool.
If you are looking for a simple solution, I agree with Vasil you should look for a third-party tool.
Hi Vasil, David,
Thanks a lot for your answers!
Do you have any points to add also for the more difficult scenario, such as the synchronized collaboration?
I have found a short description in the following article on global tenant topology when using synchronized collaboration on B2B https://aka.ms/multi-tenant-users but they mention a sync engine such MIM is used.
I hope I understand correctly, but now that you've mentioned Azure Connect metaverse, are you by any chance aware if it could be used for sync between cloud only tenants as sync engine?
Thanks a lot for your answers!
Do you have any points to add also for the more difficult scenario, such as the synchronized collaboration?
I have found a short description in the following article on global tenant topology when using synchronized collaboration on B2B https://aka.ms/multi-tenant-users but they mention a sync engine such MIM is used.
I hope I understand correctly, but now that you've mentioned Azure Connect metaverse, are you by any chance aware if it could be used for sync between cloud only tenants as sync engine?
Hi ramonabadea ,
I believe that AAD Connect uses MIM synchronization engine "under the hood" but the tool doesn't work for cross AAD tenant sync. If you choose to use MIM, as long as you have AAD P1 or P2 licenses (and a Windows Server OS license), you should be able to use it: https://azure.microsoft.com/en-us/pricing/details/active-directory/
The "Multi-tenant User Collaboration Patterns..." whitepaper talks about three distinct scenarios with different solutions. From your initial description I would think that the "Scripted collaboration" scenario (with Delta Queries, and MS Graph) would be a good fit for you, unless you require more advanced feature for M365. Or have you concluded you need those advanced features?
- Hi again David,
No advanced feature for M365 needed, the use case is very simple, just user sync between two different tenants.
I thought global tenant topology would be shorter in time to implement, but I think MIM is a tool that will be deprecated at some point or out of support anyways - found some article mentioned the end of this year.
So maybe, the scripted solution is indeed the only accessible...I would personally avoid using the "resource tenant" pattern if there are only two tenants in the picture, I like simplicity.
I am not aware of any plans to decommission MIM as a product but anyway, if I were you, I would explore the Scripted collaboration option and use e.g. Azure Functions (PowerShell) to implement this "push" automation using Delta Query.