Home » IT - Microsoft » Azure Active Directory Synchronization Tool (DirSync)

Azure Active Directory Synchronization Tool (DirSync)

Escribe tu dirección de correo electrónico para suscribirte a este blog, y recibir notificaciones de nuevos mensajes por correo.

Join 5 other followers

February 2016
« Nov   Mar »



All messages posted to this blog are provided "AS IS" with no warranties, and confer no rights. The content of this site are personal opinions and might not represent the Microsoft Corporation view. Regarding any sample code that we provide: This Sample Code is provided for the purpose of illustration only and is not intended to be used in a production environment. THIS SAMPLE CODE AND ANY RELATED INFORMATION ARE PROVIDED "AS IS" WITHOUT WARRANTY OF ANY KIND, EITHER EXPRESSED OR IMPLIED, INCLUDING BUT NOT LIMITED TO THE IMPLIED WARRANTIES OF MERCHANTABILITY AND/OR FITNESS FOR A PARTICULAR PURPOSE. This blog serves 2 purposes. Firstly, I want to share information with other IT pros about the technologies we work with and how to solve problems we often face. Secondly, I use my blog as a notebook. There's so much to learn and remember in our jobs that it's impossible to keep up. By blogging, I have a notebook that I can access from anywhere. Anything you do to your IT infrastructure, applications, services, computer or anything else is 100% down to your own responsibility and liability. Mcselles bears no responsibility or liability for anything you do. Please independently confirm anything you read on this blog before doing whatever you decide to do.

A common requirement of many companies who have an established on-premises Active Directory environment is the ability to leverage their existing on-premises user and group accounts. Leveraging already existing on-premises user and group accounts enables you to significantly reduce your operational costs and it provides easier end user access to the Microsoft cloud services they have subscribed to.

Directory sync is a foundational and critical scenario of the identity and access management solution used for integrating with Azure Active Directory. With directory sync, you can manage the entire lifecycle of your cloud user and group accounts using your on-premises Active Directory management tools. Implementing this scenario enables you to automatically provision and de-provision user and group accounts in the cloud based on information found in your on-premises Active Directory.

Directory sync works on a scheduled basis. This means, changes made to objects or to their various attributes in your on-premises Active Directory are periodically synced to your Azure AD tenant, as shown in the following diagram.

Directory sync scenario

You can continue to manage in the cloud the objects that are created in the cloud and are not linked to objects in your on-premises directory.

Benefits of implementing this scenario

Implementing directory sync in your environment introduces a variety of impactful benefits to your environment:

  • Reduced administration costs – Leveraging your already existing on-premises user and group accounts, eliminates the need to manually manage them in your Azure AD, which removes a costly manual operation from your budget.
  • Improved productivity – By automating the process of synchronizing user and group accounts, you can significantly reduce the amount of time it takes to make cloud based services accessible for your employees.
  • Increased security – Automated provisioning and deprovisioning of user and group accounts ensures that only those physical entities have access to your corporate assets that really require it as long as they need it.

Source: https://msdn.microsoft.com/en-us/library/azure/dn790211.aspx

Technorati Tags:


Leave a Reply

Fill in your details below or click an icon to log in:

WordPress.com Logo

You are commenting using your WordPress.com account. Log Out /  Change )

Google photo

You are commenting using your Google account. Log Out /  Change )

Twitter picture

You are commenting using your Twitter account. Log Out /  Change )

Facebook photo

You are commenting using your Facebook account. Log Out /  Change )

Connecting to %s

Microsoft on the Issues

News and perspectives on legal, public policy and citizenship topics

Mike Crowley's Whiteboard

“There are no limits to what you can accomplish when you are supposed to be doing something else."


There Be Dragons

Ken Cenerelli

My life in software development

VMware, Windows, Virtualization (Servers & Desktops)

VMware, Windows, Virtualization (Servers & Desktops)

Just a random "Microsoft Server / Client Tech" info..

"Feeding Your Training and Technology Obsessions"


WordPress.com is the best place for your personal blog or business site.


Documentación técnica, notas y apuntes sobre Administración de Sistemas, Servidores, Redes y más

Microsoft Taste

Mary's Blog

%d bloggers like this: