AR Azure/O365 BackSync is disabled?

Is it required to have scheduled and running AR Sync Azure/O365 BackSync (GUIDs etc.) from AAD/O365 to onprem\AD objects (VAs) with AADConnect in place (AD/O365 Hybrid Mode)?

Is it supported scenario for AR by design?

IF AR BackSync Scheduled job is required THEN for which supported scenario:

1) Non Federated Domain (AADconnect is not configured)
2) Federated Domain (AADconnect and ADFS is configured)
3) Synchronized Identity Domain (AADconnect is configured)

(*) My customer got AR 7.4.3 with (3) Synchronized Identity Domain (AADconnect is configured) and AR BackSync jobs are disabled (not scheduled) at all, and it seems like there is no problem, so far.

thank you,

Aidar K.

Top Replies

Richard.Lambert over 3 years ago +1

I wouldn't say it is a "requirement" but if they are creating hybrid users outside of Active Roles and want to use Active Roles to help manage these hybrid users, then the back sync is required. As long…
Terrance.Crombie over 3 years ago +1 verified

Yes, it's a requirement in a hybrid environment with AADConnect in play. It's most important in a Federated or Synchronized Tenant configuration, where most or all Azure-enablement is performed by AADConnect…
JohnnyQuest over 3 years ago +1

Aidar.Karabalaev - so your customer is able to examine Azure object properties through the Active Roles UI even though no back sync is configured?

If yes, then I am wondering how this is possible for …

Endpoint Privilege Management

AR Azure/O365 BackSync is disabled?

Top Replies