Changes to the domain(s) of Azure AD and/or Workspace 365

Table of Contents

• Overview
• Changes on the Azure AD domain(s)
  • Change Azure AD tenant with the same domain
  • Change Azure AD tenant with different domain
  • Same Azure AD tenant with different domain
• Changes on the Workspace 365 domains/URL
  • Rename environment URL
  • Rename or adding extra URL's to the workspace instance 

Overview

There are different kind of scenarios where you need to switch/migrate to a new Azure AD tenant and/or update the domain for the Azure AD tenant. But you can also update domain/URL on the Workspace side. We describe here into detail what needs to be updated and in which scenarios.

We assume the usage of the following information;

Back to top

Changes on the Azure AD domain(s) 

Change Azure AD tenant with the same domain

If you want to migrate/change the exact same domain and users with UPN (e.g. a.carter@w365support.com) to a new Azure AD tenant, there are a few things to consider/update on the Workspace side. 

Steps to take

1. Make sure you have set up the new Azure AD with all the users present with the same domain and email address (UPN).
2. Make sure the primary admin* has a mailbox.
3. RequestEmergencyAdminAccess with the primary admin* in the Workspace.
4. Follow the email flow and configure Single Sign-On.
5. After you have setup Single Sign-On remove/cleanup the old Azure AD tenant.

*primary admin is the admin with which the workspace is created/registered.

Back to top

Change Azure AD tenant with different domain

If you want to migrate/change a different domain and users with UPN (carter@w365support.com) to a new Azure AD tenant (a.carter@newdomain.com), there are a few things to consider/update on the Workspace side. 

Steps to take

1. Make sure you have set up the new Azure AD with all the users present with the new domain and email address (UPN).
2. UPN of the users needs to be updated in the database. Make sure you have the old domain (e.g. w365support.com), new domain (e.g. newdomain.com) and tenant url (e.g. portal.workspace365.net/w365support) ready.
   1. If you are a Self-hosted partner you could update this yourself or contact us
   2. If you are a Hosted partner please contact us
3. Make sure the primary admin* has a mailbox.
4. RequestEmergencyAdminAccess with the primary admin* in the Workspace.
5. Follow the email flow and configure Single Sign-On.
6. After you have setup Single Sign-On remove/cleanup the old Azure AD tenant.

*primary admin is the admin with which the workspace is created/registered.

Back to top

Same Azure AD tenant with different domain

It is also possible to have your own URL for customers/environments.
Check this article for more information about this.

Steps to take

• Redirect the domain with a CNAME (for example customname.partner.workspace365.net).
• Add the new URL to the Single Sign-On application in Azure AD.
  (portal.azure.com -> Select the Workspace SSO application -> Authentication, and add the new Redirect URI) here.
  (For example: https://customname.domainname.net/environmentname/OAuth2/HandleAuthorityResponse).

Back to top

Changes on the Workspace 365 domains/URL

Rename environment URL

Steps to take

Back to top

Rename or adding extra URL's to the workspace instance 

Steps to take

Back to top