EmilyM.06913 (Customer) asked a question.
Changing from AD-mastering to HR-mastering - Office 365 Azure AD Connect?
Hello, for an environment that is currently Active Directory-mastered (using Okta AD agents) and using Azure AD Connect for Office 365 sync (no Okta-Office 365 integration yet) how does HR mastering impact this?
HR will master Okta, so AD will essentially become a "downstream" application.
We also want to federate O365 with Okta, as well, so that Okta is doing the MFA auth for O365, creating/updating/deleting O365 users, assigning O365 licenses to users, etc
So does that break Azure AD Connect? Does Azure AD Connect go away or continue to exist?
If so, what's the general order of events? .... first setup HR mastering, then federate with O365, then retire Azure AD Connect?
Hi @EmilyM.06913 (Customer) , Thank you for reaching out to the Okta Community!
You'll need to review your entire list of attributes to identify what is required from AD and what cannot be replaced via HR Sourcing, to account for potential impact that this will have on all downstream apps not just Azure/O365.
Attribute-level Sourcing might be an option that allow you to have some of the user's attributes sourced from HR solution side and some from the AD side.
Depending on the type of provisioning for O365 you are looking to use, Azure AD Connect would be replaced by Okta.
The order of events that you mentioned seems right to me, but I would also plan for down-time while all the pieces fall into place.
As this is just a high level discussion and there are many environmental factors and variables to consider, I would highly recommend that you try to set up a sandbox/preview environment to test this deployment before moving to the production one.
If my answer helped, remember to mark it as best to increase its visibility for other members of the Okta Community who might have the same questions as you.
Hope my answer helps!
--------------------------------
The Okta Community Catalysts Program is now live. Collect online badges when you participate in the Okta Help Center Questions community. Learn more here.