Sync users from one On-Prem to two Azure Azure tenants

Lee Schiebel 1 Reputation point
2020-08-04T19:03:47.15+00:00

Hi all,
We're on on-prem AD business that currently uses Azure AD Connect to sync all users in our AD domain to Azure.
One of our large divisions wants to have their own Azure AD instance, with their own branding on it, rather than being under our main one. Management has agreed to this, and IT has been tasked with implementing it.

So my question is, can we sync users from our on-prem AD, to two different Azure tenants? I'm assuming if it is possible, I'd need two VM's running Azure AD Connect, and probably need to use two different attributes for the source anchor? We're using the default "ms-ds-consistencyguid" for our existing one now.

There isn't a ton of data in the existing azure/o365 instance, as we're mostly a G-suite shop for e-mail/drive/etc, but this division is going to be using more o365. We'd like to be able to have the users exist in both, at least temporarily, while we migrate them.

Thanks for any input.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
21,420 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Andy David - MVP 147.6K Reputation points MVP
    2020-08-04T19:14:37.21+00:00

    Sure, you can do that. See:

    https://video2.skills-academy.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-azure-ad-tenants

    Note:

    This topology has the following restrictions on otherwise supported scenarios:

    Only one of the Azure AD tenants can enable an Exchange hybrid with the on-premises Active Directory instance.
    Windows 10 devices can be associated with only one Azure AD tenant.
    The single sign-on (SSO) option for password hash synchronization and pass-through authentication can be used with only one Azure AD tenant.

    2 people found this answer helpful.
    0 comments

Your answer

Answers can be marked as Accepted Answers by the question author, which helps users to know the answer solved the author's problem.