Forum Discussion
Using Cloud sync to sync AD to existing Entra Accounts
Hi, matching only by email address can unfortunately be unreliable.
Before bringing the users into the Cloud Sync scope, I would compare the on-premises UPN, primary SMTP address, proxy addresses and existing Entra account. Also confirm that the cloud account is not already controlled by another synchronization engine.
For a controlled migration, use the source anchor or onPremisesImmutableId to hard-match the existing Entra account instead of relying only on soft matching.
I would start with two or three test users in a separate OU. If a duplicate account has already been created, pause synchronization for that user before deleting or changing anything, especially when a mailbox and licences are attached.
Hi, matching only by email address can unfortunately be unreliable.
Before bringing the users into the Cloud Sync scope, I would compare the on-premises UPN, primary SMTP address, proxy addresses and existing Entra account. Also confirm that the cloud account is not already controlled by another synchronization engine.
For a controlled migration, use the source anchor or onPremisesImmutableId to hard-match the existing Entra account instead of relying only on soft matching.
I would start with two or three test users in a separate OU. If a duplicate account has already been created, pause synchronization for that user before deleting or changing anything, especially when a mailbox and licences are attached.
It was the syncd account that was in the deleted users that was causing a conflict. I deleted that and I was able to copy the onPremisesImmutableId to the Azure/Entra account.
the OnPremisesImmutableId on premise and in Azure match. Its still not syncing.The best solution to ensure accounts sync.
Create Sync OU
Clear existing roles on account in Entra
Set On premise onPremisesImmutableId on Entra Account
Move account into Sync OU
Once Sync'd add roles to account
