Offboarding RM Unify / Azure Sync

[Gongalong]

Hi folks,

 

Has anyone here offboarded from RM Unify?

 

At the moment RM Unify is federated with our Office 365 system. If we offboard, how do we then connect up Azure sync on the AD to those same accounts that are up in Azure/Office 365? In part so it doesn't then duplicate the accounts.

 

Thanks

[robyholmes]

@steven_layton_sl

[snagrat]

Done this plenty of times. There is a script from RM to remove RM Unify.

 

Then, assuming you are talking about AADConnect, it will use soft match to match the OnPrem user to the Cloud account. It will not create a second account

[Gongalong]

RM have a couple of tech docs. We have to uninstall the RM sync tool and Groupcall job. We also need to remove federation, otherwise once Unify stops talking to Office 365 it will start deleting accounts. RM won't support us after that point.

 

I'm completely new to the Azure side, so I'm assuming AADConnect is the Microsoft equivalent of RM Unify AD Sync.

 

How does soft match work?

[Gongalong]

I've had a quick read of this https://www.itpromentor.com/soft-vs-hard-match/

 

Currently we don't use the email address field in the AD record, although that should be easy to populate with that used on O365. We don't use the domain suffix on AD either. Not sure how critical that is?

[DrBeaker]

Hi folks,

 

Has anyone here offboarded from RM Unify?

 

At the moment RM Unify is federated with our Office 365 system. If we offboard, how do we then connect up Azure sync on the AD to those same accounts that are up in Azure/Office 365? In part so it doesn't then duplicate the accounts.

 

Thanks

 

Out of interest - is this from an "R&D" viewpoint or a "we're moving away from RM" viewpoint?

[Gongalong]

We're using O365 PP, and it's the extra faff of having to sign into RM Unify to get the license. We did warn staff and treated it as a bit of an experiment, and it would help if staff stick to seating plans, but... Not a done deal yet though, just R&D.

 

My understanding is that O365 PP will license automatically if we're going direct to Azure.

[Boredguy]

I've had a quick read of this https://www.itpromentor.com/soft-vs-hard-match/

 

Currently we don't use the email address field in the AD record, although that should be easy to populate with that used on O365. We don't use the domain suffix on AD either. Not sure how critical that is?

 

Domain suffix is easy to add and update for all users, same with e-mail address if it's in the format of [email protected]

Once you add the UPN suffix, you can just highlight all the users and via Properties change both values at the same time using the %username% variable