To read and write data in Microsoft 365, the Microsoft 365 Connector relies on the cmdlets of the ExchangeOnlineManagement Windows PowerShell module. As a result, the connector can only work with data supported by the cmdlets of that module.
To read and write data in Microsoft 365, the Microsoft 365 Connector relies on the cmdlets of the ExchangeOnlineManagement Windows PowerShell module. As a result, the connector can only work with data supported by the cmdlets of that module.
Synchronization Service reads and writes data in Microsoft Azure Active Directory by using an Azure application in your Microsoft Azure Active Directory environment. To create a connection to Microsoft Azure Active Directory, use the Microsoft Azure AD Connector of the Active Roles Synchronization Service.
The Microsoft Azure AD Connector supports the following features:
Feature |
Supported |
Bidirectional synchronization Specifies whether you can both read and write data in the connected data system. |
Yes |
Delta processing mode Specifies whether the connection can process only the data that has changed in the connected data system since the last synchronization operation. This reduces the overall synchronization duration. |
No |
Password synchronization Specifies whether you can synchronize user passwords from an Active Directory (AD) domain to the connected data system. |
No |
Secure Sockets Layer (SSL) data encryption Specifies whether the connector can use SSL to encrypt data transmitted between Active Roles Synchronization Service and the connected data system. |
Yes |
Synchronization Service reads and writes data in Microsoft Azure Active Directory by using an Azure application in your Microsoft Azure Active Directory environment. To create a connection to Microsoft Azure Active Directory, use the Microsoft Azure AD Connector of the Active Roles Synchronization Service.
You can create an Azure AD connector by configuring an Azure application in the Synchronization Service Console:
To create and configure an Azure AD connector manual configuration, see Creating a Microsoft Azure Active Directory connector with manual configuration.
To create and configure an Azure AD connector with automatic configuration, see Creating a Microsoft Azure Active Directory connector with automatic configuration.
To configure an Azure application for an Azure AD connector using a script, see Configuring an Azure application for a Microsoft Azure Active Directory connection using a script.
Synchronization Service reads and writes data in Microsoft Azure Active Directory by using an Azure application in your Microsoft Azure Active Directory environment. To create a connection to Microsoft Azure Active Directory, use the Microsoft Azure AD Connector of the Active Roles Synchronization Service.
You can create an Azure AD connector by configuring an Azure application manually in the Synchronization Service Console. One Identity recommends using Manual configuration if you want to use an existing Azure application for the connection.
IMPORTANT: If you are upgrading from an older version of Active Roles to Active Roles 8.1.3 or later, and the connector was configured manually, then you must update the authentication data to be able to run a synchronization workflow.
To update the authentication data, you can:
Use Auto configuration. One Identity recommends this approach, as the process is handled automatically by the Active Roles Synchronization Service.
For more information on automatic configuration, see Modifying the automatic configuration settings of a Microsoft Azure Active Directory connector.
Enter the Certificate thumbprint of the Azure tenant manually, and select the Tenant Environment Type.
To create a new Azure AD connector with manual configuration
In the Synchronization Service Console, open the Connections tab.
Click Add connection, then use the following options:
Connection name: Type a descriptive name for the connection.
Use the specified connector: Select Azure AD Connector.
Click Next.
To use an existing Azure application, select Manual configuration.
NOTE: Alternatively, to use and update an existing Azure application, you can also select Auto configuration. Under Auto configuration, click Log in to Azure, then select the Tenant environment type of the Azure tenant. After logging in to Azure with your tenant, the Tenant ID, Application ID, Certificate thumbprint and Tenant environment type parameters will be automatically filled in.
Enter the Tenant ID, Application ID and Certificate thumbprint of the Azure tenant as they appear on the Azure portal. Then, select the Tenant Environment Type of the Azure tenant.
To test the connection with the new parameters, click Test connection.
To finish creating a connection to Azure AD, click Finish.
© 2024 One Identity LLC. ALL RIGHTS RESERVED. Feedback 이용 약관 개인정보 보호정책 Cookie Preference Center