Jul 26 2021 03:54 PM
Jul 26 2021 03:54 PM
I had a client ask me this question and I couldn't answer it (or find out how to do it on google).
Here's the scenario:
1. Client has his own local domain (*.local) that is NOT exposed to the internet
2. Users bring their own laptops. They can log in to their laptops via their outlook.com pin (when the setup the laptop).
3. These users do get authenticated to the outlook.com domain (or however that works).
What he wants to do is setup share and folder permissions based on those outlook.com id's.
Second thought was created AD uid/pwd and "SSO'ing" them with outlook.com ID. Couldn't figure that one out either.
Anyone got any ideas? Is it even possible?
Jul 26 2021 11:39 PM
@Michael185 Usually you'd set up Azure AD Connect or Azure AD Cloud Sync to enable hybrid identities. This would synchronize the users in the local Active Directory into Azure AD, which is used to power services like Exchange Online. You could do all kinds of fancy stuff, but in your case, if the idea is just to keep the users identity the same, above should work. Within the local domain the AD user can be used for sharing permissions, and the same username can be used to sign into eg. Exchange Online/mail.
For more information on various topics related to hybrid identity, please have a look here.
Jul 30 2021 08:53 AM
You need to have the *.local domain run in Hybrid mode with outlook.com (Azure/Office365).
One way to achieve that would be to use Hybrid Azure Active Directory join.
However, In order to configure Hybrid Azure Active Directory join, it is a necessary to meet the following requirements:
In below documentation, it is important to note that configurations are based utilizing Wizard in Azure AD Connect. Moreover, in order to use Hybrid Azure AD join, it is required that the devices on which it is being employed would have access to the following Microsoft Resources to organization’s network.:
In order to further view the documentation, you can visit on Microsoft’s documentation link: