To implement directory synchronization, which is briefly described in Chapter 4, Identities and Authentication, you need to fulfill a few requirements.
- In a nutshell, these are the prerequisites you'll need to ensure that you have set up:
- On-premises data prepared and ready
- On-premises Active Directory
- Azure AD Connect server
- SQL Server
- Accounts
- Network connectivity
- Component prerequisites
- Hardware requirements
- Install Azure AD Connect. The installation has the following options:
- Express settings
- Custom settings
Learn about all the settings at https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-select-installation.
- Plan:
- Design concepts: Go to https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-design-concepts and read the documentation you find there. This article describes the main concepts of Azure AD Connect, such as the source anchor, which must be used when planning an Active Directory synchronization. By following the steps described in the article, you'll be able to select the best approach and synchronization schema for your organization.
-
- Topologies: Go to https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-topologies and read the documentation you find there. This scenario describes the supported topologies when configuring directory synchronization using Azure AD Connect and Azure Active Directory.
Certain combinations of scenarios might not be supported, if they are not described in the article.
- Manage:
- To learn how to manage Azure AD Connect, go to https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-whats-next.
The required ports and protocols are shown in the following diagram:
You can learn about all the required ports at https://docs.microsoft.com/en-us/azure/active-directory/connect/active-directory-aadconnect-ports.
The express installation is used in most organizations. You can set it up by going to the Admin center and, in Home | Active users, selecting More | Directory synchronization:
The preceding steps are described at https://support.office.com/en-us/article/Set-up-directory-synchronization-for-Office-365-1b3b5318-6977-42ed-b5c7-96fa74b08846?ui=en-US&rs=en-US&ad=US.