The course is part of these learning paths
In this course, we take a look at what goes into planning for the implementation of Azure AD Connect Cloud Sync. We’ll review the supported topologies, and we’ll take a look at the prerequisites that you’ll need to meet to use Cloud Sync.
Learning Objectives
- A basic understanding of Azure AD Connect Cloud Sync
- Supported Cloud Sync topologies
- Deploying Cloud Sync
Intended Audience
- Those who wish to learn about Azure AD Connect Cloud Sync
Prerequisites
- General Familiarity with Azure AD
- General Familiarity with Active Directory
- Familiarity with Azure Portal
The last step in this process is to configure Azure AD Connect Cloud Sync Provisioning. This means you have to configure it and enable it, so it starts synchronizing your users. To do this, browse to Azure Active Directory in the Azure portal. From here, click 'Azure AD Connect' and while in the 'Provision From Active Directory' window, click 'Manage Azure AD cloud sync'. Click 'New configuration' and then choose the domain you want to sync and whether to enable password hash sync and then click 'Create'. At this point, the edit cloud sync configuration screen appears and on the screen, you can configure several options. The 'Scope' option allows you to configure whether all users are in scope or to configure scoping filters to provision specific users and groups.
'Manage attributes' allows you to map attributes between your on-prem, user and group objects and the objects in Azure AD. 'Validate' allows you to verify that synchronization is working as expected before you enable the configuration. It does this by allowing you to use the provision a user button to test with individual users. Under settings, you can configure a notification email address where you wish to receive alerts when provisioning isn't healthy for some reason. Microsoft recommends keeping the 'Prevent Accidental Deletion' checkbox selected so that the configuration can't be accidentally deleted. You should also set the 'Accidental Deletion Threshold' to a number that you wish to be notified about. And then the 'Deploy' option allows you to enable the sync for the users and groups that are in scope, and then moving the selector to 'Enable' and clicking 'Save' deploys your configuration.
Tom is a 25+ year veteran of the IT industry, having worked in environments as large as 40k seats and as small as 50 seats. Throughout the course of a long an interesting career, he has built an in-depth skillset that spans numerous IT disciplines. Tom has designed and architected small, large, and global IT solutions.
In addition to the Cloud Platform and Infrastructure MCSE certification, Tom also carries several other Microsoft certifications. His ability to see things from a strategic perspective allows Tom to architect solutions that closely align with business needs.
In his spare time, Tom enjoys camping, fishing, and playing poker.