Forum Discussion

Navishkar Sadheo

Steel Contributor

Nov 15, 2019

Sync from Azure AD to local AD

Hi all Hope everyone is well. Please can someone assist me with the following question. We are in the process of creating a new staff on-boarding solution in AAD. This solution will create the us...

Azure Active Directory (AAD)

Identity Management

Emanuel van der Aalst

Brass Contributor

Because AAD is the way forward and leading identity management platform in all our current projects. Furthermore is it super easy to build a PowerApp for the customers so that HR can create new staff and have them land in the right teams with access to the right resources. #Its2019 🙂

Bronze Contributor

Nov 15, 2019

Sure, I am a big advocate of AAD. But if you are going that route, you should really go full-cloud and don't add your users to a local AD anymore.

Just do a full AAD join and publish all your apps through App Proxies.

Emanuel van der Aalst
Brass Contributor
Nov 15, 2019
Thijs Lecomte

We are on the same page. That is what we are trying to do. But we still struggle with getting that scenario seamless AND passwordless. See my other post on getting SSO with on premises apps:

https://techcommunity.microsoft.com/t5/Azure-Active-Directory/Azure-AD-Azure-Active-Directory-Domain-Services-amp-Windows/m-p/1004958

So simple concept, apparently so hard to do...
- Navishkar Sadheo
  Steel Contributor
  Nov 18, 2019
  Hi Emanuel van der Aalst
  
  Thanks the replies. Will take a look at that link you posted.
  
  I believe UnitySync can do this - https://www.dirwiz.com/unitysync/
  - Thijs Lecomte
    Bronze Contributor
    Nov 18, 2019
    Tool looks great, be aware that this tool will not be able to sync passwords.
    
    Can you configure the legacy applications with Azure AD applications?
Navishkar Sadheo
Steel Contributor
Nov 18, 2019
Thijs Lecomte

Hi Thijs and thank you replying. Problem is we still have some legacy applications on-prem that requires a local AD account.

Share

Resources