RM Unify

[AndyAdmin]

I've been asked to assist a client who is currently using RM unify for SSO with Office 365. They want to move away from RM unify to dirsync as they are moving to non domain joined tablets and they don't use SSO for anything else. I've done a bit of googling but nothing stands out and RM's site is (for obvious reasons) quiet on the subject.

 

Has anyone had any experience with moving from Unify to dirsync?

 

Thanks all.

[GeekyPete]

Are they moving to none AD tablets entirely? If so what are they going to use DIRSync with? You still need an AD site to use DirSync. Are they using the Paid for version of RM unify and want to save money by moving away? If they are using the paid for version of RM unify they'll have access to AD Sync (really DirSync but with a little customisation). It should be just a case of removing AD Sync and setting up Dirsync. As long as it's the same domain you should be OK. You need to be very careful if you've changed domain. If DIRSync runs and the GUIDs don't match up it could well "de-provision" the existing email accounts, security Groups etc...

 

TBH I'm a little woolly on the Federation and if you'll need to re-federate.

 

Anyway, What's the relevance of the Tablets? The effect is the same if you are accesses via a domain computer or your BYOD iPad.

[AndyAdmin]

Thanks, life is never as simple as you'd hope. They are a CC4 user and want to migrate to a vanilla MS environment too.

 

Based on what you say does it make sense to move from AD sync to Dirsync initially to remove Unify from the equation and then look at the domain migration?

 

Migrating between domains with dirsync seems reasonably straightforward by deactivating dirsync within Office365 effectively isolating those user accounts from the local domain. Then populate the new domain with the users and attributes (userPrincipalName, proxyAddress, LegacyExchangeDN). As the user GUID will change then the immutableID will need clearing out of Azure - after the new Dirsync is setup, O365 will then SMTP match users based on primary email address and create a new ID in Azure AD.

 

Does that make sense to you?

Thanks

[Wubbalubbadub]

Andy,

 

Have you gone through with this yet?

 

I too am in a situation where I have RM unify with an old RM network. We are moving away from an RM network and so i am building a new domain but the hardest task I have is this RM unify! How can i move to Dir sync instead! Do i need to remove the federation!?

[Zammo]

Andy,

 

Have you gone through with this yet?

 

I too am in a situation where I have RM unify with an old RM network. We are moving away from an RM network and so i am building a new domain but the hardest task I have is this RM unify! How can i move to Dir sync instead! Do i need to remove the federation!?

 

Hello!

 

Did you ever get this done?

 

I am looking to do the same thing (bin RMU and go with Azure Sync)....

 

Thanks