Confirm approach and architecture to stay decentral(cross tenant sync) or to merge tenants

Copper Contributor

Hello,

We are a group of companies with a decentral setup (all small companies 15-200 users). We are planning to implement a central ERP (D365) system for all the companies. I would like know/validate my options and know if the proposed solutions are possible.

  1. We stay decentralized. Meaning each entity has his own AD -> Entra ID-> M365

To allow them to connect to a central applications like D365 we could invite the entities to the HQ tenant as external members by using Cross-tenant syncronization.
https://learn.microsoft.com/en-us/entra/identity/multi-tenant-organizations/cross-tenant-synchroniza...
Or to wait for MTO to be released

https://learn.microsoft.com/en-us/microsoft-365/enterprise/plan-multi-tenant-org-overview?view=o365-...

    2. We take the first steps to Merge all the tenants. First step would be to Create a separate user account in the HQ tenant for each user and keep them in sync. This way the users will have 2 accounts. There original account and their new account to access the central ERP with the idea to migrate services in a later phase to this account. To do this I was thinking to implement the following:

Architecture3.png

 

It is a combination of 2 supported scenarios:
https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/plan-connect-topologies
Would this be possible?

Or could we use Cloud sync to accomplish this?

 

Cloud sync.png

 

 

Thanks!

1 Reply
My advice is to avoid a scenario where users juggle between two separate identities. It will inevitably lead to confusion and support challenges especially within Microsoft Office and Mobile apps. Instead, merge to a single tenant or if you can't do that, then setup B2B so that users can maintain a single identity to access D365.