Forum Discussion

Navishkar Sadheo's avatar
Navishkar Sadheo
Steel Contributor
Nov 15, 2019

Sync from Azure AD to local AD

Hi all

 

Hope everyone is well. Please can someone assist me with the following question. We are in the process of creating a new staff on-boarding solution in AAD. This solution will create the user account in AAD as well. Is there anyway to sync this user information back down to local AD? Is there perhaps a third party app we can look at??

 

Appreciate any advice...

  • Thijs Lecomte's avatar
    Thijs Lecomte
    Bronze Contributor
    Hi

    There isn't any way to sync users back to AD from AAD natively.

    I don't know of any third party products.
    You could try to script this.

    But why are you creating the users in AAD in the first place?
    • Emanuel van der Aalst's avatar
      Emanuel van der Aalst
      Brass Contributor

      Thijs Lecomte 

       

      Because AAD is the way forward and leading identity management platform in all our current projects. Furthermore is it super easy to build a PowerApp for the customers so that HR can create new staff and have them land in the right teams with access to the right resources. #Its2019 🙂

      • Thijs Lecomte's avatar
        Thijs Lecomte
        Bronze Contributor
        Sure, I am a big advocate of AAD. But if you are going that route, you should really go full-cloud and don't add your users to a local AD anymore.

        Just do a full AAD join and publish all your apps through App Proxies.
    • CloudHal's avatar
      CloudHal
      Iron Contributor

      Thijs Lecomte if you still need on-AD then you need to author all your accounts in AD, you should not have a JML creating some users in AD and some in AAD...

  • Hi there,

     

    Until there's native account write-back in AAD I would strongly recommend following AD>AAD.

     

    I have some scripts to backport AAD accounts to AD if you would like them. I have them in a blog post on www.wave16.com, however you cannot fix the password issue and there's also the fact this isn't an ideal scenario.

Resources