Join Log in
Score:0
avatar Server

How can push AzureAD identities to on prem ActiveDirectory

in flag
JorgeSandoval

Situation is that we have multiple sites (AWS VPCs), each with their own self-managed ADDS domains with no network connectivity between them (by design). We need to provision each sites ADDS users automatically from AzureAD identities including password writeback (passwords should only be changed from Azure).

A possible solution (I believe) is to use a cron (scheduled task) to query the Azure graphapi for a user list and provision users using powershells new-aduser cmdlets, setting user attributes to allow for Azure AD Connect password write back to ensure password synchronization.

However, the above needs considerably more investigation and seems like a custom roll your own solution requiring monitoring.

Is there a more out of the box solution (including third parties?) that allows AzureAD --> on premise AD user synch?

26
0 + 0
Score:1
Jevgenij Martynenko avatar Server
us flag
Jevgenij Martynenko

There is no out of the box solution that could meet your needs. Your options are: to re-think your design, do custom development (scripting), or purchase third-party solution.

Third-party solutions which might cover you needs fall into Identity Management (IDM) or Identity Governance and Administration (IGA) categories. You can find profucts easily using your favorite search engine

BTW

setting user attributes to allow for Azure AD Connect password write back to ensure password synchronization

This is not gonna work, because Azure AD Connect synchronizes users and passwords from AD to Azure AD, but not the other way around. Hense, password writeback only works when the source of the account is AD

0 + 0
ธงชาติไทย
Elon Musk
I sit in a Tesla and translated this thread with Ai:

mangohost

Post an answer

Most people don’t grasp that asking a lot of questions unlocks learning and improves interpersonal bonding. In Alison’s studies, for example, though people could accurately recall how many questions had been asked in their conversations, they didn’t intuit the link between questions and liking. Across four studies, in which participants were engaged in conversations themselves or read transcripts of others’ conversations, people tended not to realize that question asking would influence—or had influenced—the level of amity between the conversationalists.