Sync Azure AD to onPremise AD (user properties)

[StefanKi]

Hello,

Is it with AD connect possible to use Azure AD as Master?  So I like to do all AD operations in Azure Ad and AD connect will sync it into the onPremise AD.

Regards

Stefan

[#2]

No, this isnt possible! You fo have writeback features like password writeback and group writeback which Will sync back to Active directory but otherwise this is not possible

Adam

[#3]

Might I ask the use case of fhis requirement? By the way, the answer here is not to use AD Connect...you should thing on an architecture where you have an AD deployed in the Cloud (in Azure), synchornized from there to Office 365 and them have a domain controller OnPremises that is joined to your Cloud AD deployment

[#4]

I belive he has an normal ad ->adconnect->AAD infrastructure and just wanted to switch around the management role aka handling users from AAD then sync to AD! This wouldn’t change with having AD in Azure!
Your scenario is something I’d like to setup soon though 🙂

Adam

[#5]

Enter AAD Connect Provisioning Agent 😊

To use this feature, you need Azure AD P1 and a Workday subscription. Please note, this feature is currently in preview.

“The Azure Active Directory user provisioning service integrates with the Workday Human Resources API in order to provision user accounts. Azure AD uses this connection to enable the following user provisioning workflows:

• Provisioning users to Active Directory - Synchronize selected sets of users from Workday into one or more Active Directory domains.

• Provisioning cloud-only users to Azure Active Directory - In scenarios where on-premises Active Directory is not used, users can be provisioned directly from Workday to Azure Active Directory using the Azure AD user provisioning service.

• Writeback of email addresses to Workday - The Azure AD user provisioning service can write the email addresses of Azure AD users back to Workday.”

https://docs.microsoft.com/en-us/azure/active-directory/manage-apps/user-provisioning

https://docs.microsoft.com/en-us/azure/active-directory/saas-apps/workday-inbound-tutorial

 

If you’ve found this post helpful, please click the Like button.

[#6]

Thanks for your responds and help.

I can change mostly everything in the onPremise AD.

But I like the Azure AD UI and like to work in modern UI.

The fields greed out in the screenshot I like to edit and sync the information back into the onPremise AD.

Regards

Stefan

[#7]

Hi, do you know if in-bound user provisioing to AD/AAD is coming to SAP SucessFactors?