Migrate from Cloud identities to Azure AD Connect.

Hi, Customer has working tenant with data inside and you need to convert it from Cloud-Only to Synced. It can be done with the following choices: UPN-matcing https://support.microsoft.com/en-us/help/3164442/how-to-use-upn-matching-for-identity-synchronization-in-office-365,-azure,-or-intune SMTP-matching http://www.ivchenko.pro/Blog/Post/23/Merging-on-premises-and-Office-365-users HARD-matching https://dirteam.com/dave/2014/08/15/fixing-office-365-dirsync-account-matching-issues/ Or by using little bit more effort and exporting user attributes from Office 365 to csv-file. https://365lab.net/2014/04/18/office-365-migrate-from-cloud-identities-to-dirsync/ Johan,…continue reading →

ADFS-failover PrimaryServer to Secondary.

Active Directory Federation Services can be installed in a farm. There can be maximum of 5 ADFS-servers in a farm using locally installed SQL Express. When You add in the sixth, You will have to install Full SQL-Server instance for it. If You wanto to Loadbalance the farm with ex.…continue reading →

Add Calendar permissions to mailboxes in Hybrid environments.

Hi again, Below script will add Reviewer permissons for DefaultCalendarShare group. This is needed for Hybrid environments and Cross-Premises calendar sharing. $allmailbox = Get-Mailbox -Resultsize Unlimited | where { $_.IsShared -eq $False -and $_.ArbitrationMailbox -eq $Null } $Logfile = "C:TempLogsadd-calendarPerm.log" Foreach ($Mailbox in $allmailbox) { $cal = (Get-MailboxFolderStatistics $Mailbox |…continue reading →

Java and Shibboleth authentication with Azure REST API and ADFS.

The last blog entry was about setting up Onpremise AD with Office 365 and ADFS. So now to the instresting part. I'm going a little bit awol with this, as I'm not a coder. First about Azure authentication. https://docs.microsoft.com/en-us/azure/app-service-api/app-service-api-whats-changed#authentication And specially this one. So this one in mind, let's proceed. Java…continue reading →

Azure AD Connect with ADFS customization.

So scenario was this. Customer has an Office 365 tenant all ready in-place. The users in Onpremise AD have SamAccountNames as UserPrincipalNames. The next step Is obvious. Add UPN-suffix and change UserPrincipalName to match email address. Then add mail-attribute for the users. Then install Azure AD Connect and do the…continue reading →