Azure AD Connect provisioning

[jmak]

I'm looking at moving to a hybrid SSO system and trying to work out whether I can make good use of what we've got our whether I should start again.

 

Current setup: onsite AD with Groupcall IDaaS. AD provisioned manually/script, IDaaS provisioned automatically from MIS (SIMS). IDaaS authenticates against onsite AD.

 

Target: SSO with hybrid onsite and Azure AD with accounts automatically provisioned from SIMS data.

 

Question: IDaaS can provision O365 accounts based on SIMS changes. Could I then take the O365 accounts to provision Azure AD and then synchronise back to on premises?

[Blue_Cookeh]

Why not do SIMS > Onsite AD > Office365/Azure AD? That seems to be the more popular and most supported flow.

[jmak]

Why not do SIMS > Onsite AD > Office365/Azure AD? That seems to be the more popular and most supported flow.

I don't have a system or the Powershell skills to automate SIMS to onsite AD, so was wondering whether I could do something with the systems we're already using/paying for.

 

Otherwise, I agree - seems like the more obvious way round.

[ZLounds]

There's a few companies that offer this service, I use tools4ever.co.uk and use their product UMRA, have done in 2 schools now. Another one I've heard of and used in a previous school was Salamander.

[HPlum78]

I have mentioned this before but I would look at MIM, maybe a bit much but is powerful and can provision accounts in to any number of systems. Also will take care of the whole account life cycle (Joiners/ Movers/ Leavers).

[oapscarface]

Second for SalamanderSoft, we're a trust of 9 schools and rely heavily on them provisioning our users on prem AD, Office 365 and now Sharepoint.