1. Azure AD Sync IntroductionFollow
This tool makes it possible to transmit users, user groups and group membership information from Azure Active Directory to Workspace 365.
Microsoft SQL Server Compact 4.0
Microsoft Online Services Sign-In Assistant
Be sure to install the Azure module within Powershell.
An active Azure subscription is required.
The goal of the Active Directory Sync Tool is to transmit users, user groups and group membership information from Active Directory to Workspace 365. The following diagram describes the general architecture of Active Directory sync to Workspace 365.
The data flow is unidirectional – data is coming from Active Directory through the AD Sync tool into Workspace 365 API and ends up in Workspace 365 database.
AD Sync tool periodically queries the Active Directory for changes, and calls Workspace 365 API to process them. Sync tool is implemented either as console application or Windows service.
In general case, AD Sync tool is installed on a different server than Workspace 365 web application, though it is possible but not recommended to keep them on a single server. In case of different servers, it is required to be able to establish HTTPS connection between AD Sync Tool and Workspace servers.
To configure the whole process, three actions are required:
- Configure Active Directory so AD tool can access the information in it.
- Configure Workspace 365 so its API accepts information from the Sync Tool.
- Configure Sync tool so it can connect both to AD and Workspace 365