RMUnify defederation from Office365

[davie887]

Hi there, 

 

I know some here have done this and successfully removed RMUnify as their identity provider. I have been in contact with RM for nearly 2 months now and they have given me a ballpark figure of FIVE GRAND to defederate and set up Entra Cloud Sync. Suffice to say I just laughed.

I know how to remove the 365 federation but was wondering if anyone had the documentation from RM R.E immutable IDs etc or even their scripts that they wouldn't mind sharing with me. I read a post from someone on here that they just asked support and RM gave them the instructions... This was in 2018 but the poster hasn't been on here since 2023

I've tested Entra Cloud Sync, works great with new users, not so with RM provisioned. Got MS on the case, they came to the conclusion that we need to remove RM, remove the attributes they amended on 365 and the sync should work and not create duplicate/erroneous onmicrosoft.com accounts 

 

Thanks in advance for any help!

Edited December 2, 2025 by davie887

[EssentialRug]

1 minute ago, davie887 said:

Hi there, 

 

I know some here have done this and successfully removed RMUnify as their identity provider. I have in contact with RM for nearly 2 months now and they have given me a ballpark figure of FIVE GRAND to defederate and set up Entra Cloud Sync. Suffice to say I just laughed.

I know how to remove the 365 federation but was wondering if anyone had the documentation from RM R.E immutable IDs etc or even their scripts that they wouldn't mind sharing with me. I read a post from someone on here that they just asked support and RM gave them the instructions... This was in 2018 but the poster hasn't been on here since 2023

I've test Entra Cloud Sync, works great with new users, not so with RM provisioned. Got MS on the case, they came to the conclusion that we need to remove RM, remove the attributes they amended on 365 and the sync should work and not create duplicate/erroneous onmicrosoft.com accounts 

 

Thanks in advance for any help!

 

Pretty sure these are the instructions I followed way back when we did this, not sure if these are what you have already?

https://support.rm.com/generaldownload.asp?cref=dwn3332757

[davie887]

2 minutes ago, EssentialRug said:

 

Pretty sure these are the instructions I followed way back when we did this, not sure if these are what you have already?

https://support.rm.com/generaldownload.asp?cref=dwn3332757

 

Thanks, seen that however those are for federating TO RMUnify rather than removing. I'm concerned with not being able to match users after defederation

[EssentialRug]

2 minutes ago, davie887 said:

 

Thanks, seen that however those are for federating TO RMUnify rather than removing. I'm concerned with not being able to match users after defederation

 

Apologies...that will teach me for not reading properly! I'll see if I have the docs saved anywhere in my files!

[davie887]

2 minutes ago, EssentialRug said:

 

Apologies...that will teach me for not reading properly! I'll see if I have the docs saved anywhere in my files!

 

No worries. The doc for defederation has gone/put behind a paywall 

 

[davie887]

Bump! Does anyone have any further info about RMUnify removal? I know several people have done it

[paulkerton]

Defederating from 365 should be as simple as removing Office 365 the app in Unify. That's what we've done in the past.

[6Foot3]

I remember doing this a year ago.

 

It was done through PowerShell, which was quite cool to watch.

 

I'll see if I still have it.

[davie887]

25 minutes ago, paulkerton said:

Defederating from 365 should be as simple as removing Office 365 the app in Unify. That's what we've done in the past.

 

There is a PowerShell step to remove any federation as alordcharlie said. I know the generic remove federation command but I think there is steps to reset immutableIDs to null. It's this bit that has me a bit worried...

 

I have Salamander setting up MIS user provisioning on Monday (Bromcom), I have Entra Cloud Sync working in new AD OUs for staff and students. Works great for new users. Existing users won't match because of whatever RMUnify adds to match AD/365 users. 

[6Foot3]

2 hours ago, davie887 said:

 

There is a PowerShell step to remove any federation as alordcharlie said. I know the generic remove federation command but I think there is steps to reset immutableIDs to null. It's this bit that has me a bit worried...

 

I have Salamander setting up MIS user provisioning on Monday (Bromcom), I have Entra Cloud Sync working in new AD OUs for staff and students. Works great for new users. Existing users won't match because of whatever RMUnify adds to match AD/365 users. 

 

Sorry, I couldn't find it. I only needed it once, so I didn't think about keeping it by the looks.

 

I reached out to RM to see because it's definitely that article I had access to when I did it, but it looks like RM is making you pay to access it now, which seems totally ridiculous.

 

I thought RM went to sh*t, but this is a new low for them.

 

 

 

[paulkerton]

3 hours ago, davie887 said:

 

There is a PowerShell step to remove any federation as alordcharlie said. I know the generic remove federation command but I think there is steps to reset immutableIDs to null. It's this bit that has me a bit worried...

That might be something RM did for us then. We only had to remove the Office 365 app.

[JazzFlute]

That quote is a joke as remember them doing this for me a couple of years back and approx. £500 to un-federate.  Just looked for the instructions as i usually keep everything but remember i deleted everything RM from network as was glad to be rid of them 🤣

[davie887]

2 minutes ago, paulkerton said:

That might be something RM did for us then. We only had to remove the Office 365 app.

 

Do you recall what they charged? 

[JazzFlute]

Just checked my back ups!

 

 

How to unfederate your Microsoft 365 domain from RM Unify.pdf

[davie887]

1 hour ago, alordcharlie said:

 

Sorry, I couldn't find it. I only needed it once, so I didn't think about keeping it by the looks.

 

I reached out to RM to see because it's definitely that article I had access to when I did it, but it looks like RM is making you pay to access it now, which seems totally ridiculous.

 

I thought RM went to sh*t, but this is a new low for them.

 

 

 

 

 

No worries mate, thanks for looking. I will post my findings here so everyone can see how to get the shackles off

[davie887]

Just now, JazzFlute said:

Just checked my back ups!

 

 

How to unfederate your Microsoft 365 domain from RM Unify.pdf 520.66 kB · 0 downloads

 

Legend! Thank you so much!

[JazzFlute]

3 minutes ago, JazzFlute said:

Just checked my back ups!

 

 

How to unfederate your Microsoft 365 domain from RM Unify.pdf 520.66 kB · 1 download

unfederate_m365domain_from_rmunify.zip

 

PowerShell Script attached but use at at own risk as this is what i had at the time 

 

[paulkerton]

8 minutes ago, davie887 said:

 

Do you recall what they charged? 

I wasn't involved in those conversations, it was negotiated as part of extending with them for another 12 months, so I'm not sure there was a specific line item.

[davie887]

4 minutes ago, JazzFlute said:

unfederate_m365domain_from_rmunify.zip 1.87 kB · 0 downloads

 

PowerShell Script attached but use at at own risk as this is what i had at the time 

 

 

Fairly similar to what I was preparing, thanks for this 

[k-strider]

you have probably had enough to go on from previous posts  but a while ago i UN-federated a primary school from RM o365...  we federated them with google (which is not usual) but from memory the powershell script worked through a csv where we use their email address to link them and change the immutable id to (in our case i think to their email cause we were going to google) but i think you could do the same getting their AD GUID... are they the same or are they some how hashed?  was the only other thought... maybe if you have a tenant that is already using AD connect you can try and look

[davie887]

4 minutes ago, k-strider said:

you have probably had enough to go on from previous posts  but a while ago i UN-federated a primary school from RM o365...  we federated them with google (which is not usual) but from memory the powershell script worked through a csv where we use their email address to link them and change the immutable id to (in our case i think to their email cause we were going to google) but i think you could do the same getting their AD GUID... are they the same or are they some how hashed?  was the only other thought... maybe if you have a tenant that is already using AD connect you can try and look

 

Thanks. I *believe* I just need to null the immutableID field in Entra. When I try to sync an existing user (in federated, RMU created) it always fails to match and creates a UPN+random number. New users sync perfectly, but obviously don't work with RMU sso because they don't exist in RMU.

 

Will be doing Google as well with either Google directory sync or Entra I'd redirection. We have nothing of value in Google as we are mostly a 365/teams house 

 

 

[6Foot3]

18 hours ago, JazzFlute said:

Just checked my back ups!

 

 

How to unfederate your Microsoft 365 domain from RM Unify.pdf 520.66 kB · 15 downloads

Coming in clutch!

[Gongalong]

On 02/12/2025 at 15:40, davie887 said:

 

No worries. The doc for defederation has gone/put behind a paywall 

 

I've logged into the support account and it still isn't available, so my guess is they've nuked the article.

[davie887]

Big shout out to JazzFlute! Finished defederating RMUnify this morning, used bits of the PowerShell script above, worked a treat. Moved users into the synced OUs some at a time to catch any issues. So far, only a few password resets. Used it as an opportunity to clean up some username madness from ~10 years ago. Salamander are working on the user provisioning from Bromcom. Works a treat, users signed into everything Microsoft seamlessly. Very happy! £5k, what a joke RM have become.

 

Anyone reading this in the future, I am keeping hold of these files in case you need them. Also remember to RTFM, it's vital to remove the permissions from the RMUnify Azure/Entra app, stop and disable the RM service on your DC before letting loose the PowerShell 

 

Next step, Google directory sync. Off to do some reading. Thanks all

[JazzFlute]

20 hours ago, davie887 said:

Big shout out to JazzFlute! Finished defederating RMUnify this morning, used bits of the PowerShell script above, worked a treat. Moved users into the synced OUs some at a time to catch any issues. So far, only a few password resets. Used it as an opportunity to clean up some username madness from ~10 years ago. Salamander are working on the user provisioning from Bromcom. Works a treat, users signed into everything Microsoft seamlessly. Very happy! £5k, what a joke RM have become.

 

Anyone reading this in the future, I am keeping hold of these files in case you need them. Also remember to RTFM, it's vital to remove the permissions from the RMUnify Azure/Entra app, stop and disable the RM service on your DC before letting loose the PowerShell 

 

Next step, Google directory sync. Off to do some reading. Thanks all

 

Glad it all helped!! just goes to prove backups do come in handy 🤣 I remember only paying about £500 at the time for RM to do this just for the unfederation even though I had the tech article as was told if i done it myself and things went wrong they wouldn't support as I was cancelling all my RM Products/Services as had a lot on at the time work wise.  In hindsight could have saved myself £500 but would never of thought that was a £5000 job 🤣