VIDEO: Configure Azure in Active Roles 7.2 And Above (Part 2 of 2) (234769)

In Active Roles 7.4.3 and later, the Active Roles Synchronization Service has an Azure BackSync Configuration Wizard which automates all of the below steps. In this version, click on the gear in the top-right-hand corner and choose Configure Azure BackSync...

Fill in the required credential and server information in order to automatically create the necessary connectors, mappings, and workflow steps. Close and re-open the Active Roles Synchronization Service Console when the wizard completes.

1. Log into the Azure Portal.
2. Navigate to Azure Active Directory | App Registrations
3. Choose New application registration. The name can be anything as needed. The Application Type must be Web app / API. The Sign-on URL must be http://localhost
4. After the application is created, click on it and select Keys
5. Enter a Key Description and an Expiration Duration.
6. Choose Save and immediately copy the displayed key to a safe location. NOTE: This key is only displayed once. If lost, a new key will need to be generated.
7. On a computer with the Azure Active Directory Module for Windows installed, run the script attached below, which can also be found in the Active Roles 7.2 Synchronization Service Administrator Guide. Be sure to substitute the Application ID from the application which was created in Step 3 above. When prompted, use a credential with Global Administrator access on the Azure side.
8. Open the Active Roles Synchronization Service Console and choose Connections on the left.
9. Create a new connection. In the Use the specified connection: dropdown, choose Microsoft Azure AD Connector. Use the Azure AD Domain which was gathered in Part 1 of this series. The Client ID is the Application ID gathered from the Azure Portal, and the Key is the one which was generated in Step 6 above. If a connection to Active Roles is not already present, it will be necessary to create one as well.
10. Choose Mapping and the Azure connection.
11. Add a mapping pair, and create a mapping between Azure User objects and Active Roles User objects.
12. Click on the new User - User mapping pair and then Add mapping rule
13. If valid for your configuration, specify the userprincipalname as the mapped attribute.
14. Choose Sync Workflows on the left and then Add sync workflow
15. Click on the new Workflow and then Add synchonization step
16. This is an Update step. The source connection will be the Azure connection, and the target will be the Active Roles connection.
17. Click on the Forward Sync Rule button and add an update of the Azure ObjectID to the Active Roles edsvaAzureObjectID attribute.
18. Also create a Forward Sync Rule to post a text value of TRUE to the Active Roles edsvaAzureOffice365Enabled attribute.
19. Save and run the Synchonization Step.