Requirement to sync users from Entra ID to on-premises AD

Question

Unable to sync users from entra ID to on-premises AD. Tried with Cloud connect sync buut only able to sync groups.

Please suggest on this ASAP.

Answer 1

Hi @Sourav Kumar ,

it's not possible to sync user accounts from Microsoft Entra ID to an on-premises Active Directory.

I am not aware of any "connector" from Microsoft to get this sync from Entra ID to on-premises Active Directory done.

There might be a 3rd party solution available but I don't know. Another option might be to create a solution using PowerShell or similar.

---

(If the reply was helpful please don't forget to upvote and/or accept as answer, thank you)

Regards

Andreas Baumgarten

Answer 2

Hello @Sourav Kumar

Thanks for using Q and A forum.

The Microsoft Entra Connect synchronization services (Microsoft Entra Connect Sync) is a main component of Microsoft Entra Connect to synchronize identity data between your on-premises environment and Microsoft Entra ID.

Microsoft Entra Connect Sync

Provisioning and configuration are stored and managed on the on-premises sync server. Microsoft Entra Connect cloud sync can run alongside Microsoft Entra Connect to simplify password writeback

Ref- Microsoft Entra pass-through authentication: Quickstart

---

If this answers your query, do click Accept Answer and Up-Vote for the same. And, if you have any further query do let us know.

Answer 3

Hello Sourav Kumar

Synchronization via Entra Connect is via one source of authority (on-premises). It is not supported to sync from Azure to on-prem. And I am not aware of any connector that does this.

Synchronization from Enta to on-premises AD (also known as “writeback”) is limited to certain objects and attributes.

Password Writeback: Sync passwords. https://learn.microsoft.com/en-us/entra/identity/authentication/tutorial-enable-sspr-writeback

Device Writeback: Allows Azure AD joined devices to sync back to on-premises AD.

Group Writeback: Syncs Azure AD security groups to on-premises AD if you have Azure AD Premium P1 or P2 licenses.

As a work around you can bulk import your users using CSV: https://learn.microsoft.com/en-us/entra/identity/users/users-bulk-add

You can mark it 'Accept Answer' and 'Upvote' if this helped you

Regards,

Abiola