Synchronize Azure AD users to local AD

[IvanBelev]

Hello Community,

I have the following topic that I couldn't find how to handle. We have many existing Office365 users (the organization is a University). We need to create a new empty local Active Directory and sync those users from Azure to the local AD (one way from Azure to local AD), so we can have the local AD as authentication provider for some local applications. We need to be able to use the same username and password, that is already set in Azure. I read many Microsoft articles but always the the sync is in the opposite direction to what we need.

Is this possible and how?

Thank you.

[#2]

@IvanBelev 

All your users are actually stored not in Office365 but in Azure. As far as i understand you can do this in two steps:
1) Export Azure users
2) Import exported users in local AD

But im not sure you can export them with their passwords.

Here is the example: https://vmlabblog.com/2020/02/how-to-export-an-azure-ad-account-to-the-ad/

[#3]

Hi @IvanBelev 

Aside for some very specific situations such as password and certain groups, write back from AzureAD to on Prem AD DS is not possible. In the past we have created a new on prem domain, exported out the relevant data from Azure AD, import it into the local AD then set up AzureAD connect. This would make the on Prem AD the source of authority going forward so changes would need to be done in AD DS and not Office365 going forward.

I've done this for small clients, but not at the scale of a university.

[#4]

Just adding to @HidMov that this is the way to go, but there is no way to export passwords.
So you will have to provide a temporary password for users to use once

[#5]

Do you have an article on how to export from Azure AD?

[#6]

Hi @PhillipRGarcia 

In the portal:

Download a list of users in the Azure portal - Microsoft Entra | Microsoft Learn

I think I used AzureAD Powershell back in the day (been a while since I've done this) Get-AzureADUser might be a good starting point.

Get-AzureADUser (AzureAD) | Microsoft Learn

Hope this helps,