Sync multiple on-prem AD Domian to singe Azure AD tenant

Mark 1

Hello,

We have multiple on -prem domains configured but we want to have Single SSO for our O365 SaaS applications. is it possible with AD connect sync or Azure AD Connect cloud sync ?

company A, Company B and company C should have access to office saas applications

2 answers

AmanpreetSingh-MSFT 56,701 Reputation points

2021-08-06T11:03:08.913+00:00

Hi @Mark • Thank you for reaching out.

Yes, you can sync users from multiple domains, in multiple forests to single Azure AD tenant.

When you have multiple forests, all forests must be reachable by a single Azure AD Connect sync server. The server must be joined to a domain. If necessary to reach all forests, you can place the AD Connect server in a perimeter network (also known as DMZ, demilitarized zone, and screened subnet).

Read More: Multiple forests, single Azure AD tenant

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

2 people found this answer helpful.
Mark 1 Reputation point

2021-08-06T11:42:52.267+00:00

Thank you, Aman, for your prompt response. What about Office SaaS apps? we want to have single SSO for office saas apps.

AmanpreetSingh-MSFT 56,701 Reputation points

2021-08-12T07:54:28.167+00:00

Hi @Mark · For Seamless SSO to office SAAS apps, please refer to https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sso-quick-start for step by step instructions.

AmanpreetSingh-MSFT 56,701 Reputation points

2021-08-16T06:46:20.807+00:00

Hi @Mark · Just checking if you have any further question.

Ramakrishnan Ranjith 0 Reputation points

2023-10-03T09:26:46.4833333+00:00

but how this is possible

Ramakrishnan Ranjith 0 Reputation points

2023-10-03T09:27:14.97+00:00

However, there is one limitation that will most likely cause you the most grief, and is probably why you landed here in the first place. You can only have one AD Connect instance per tenant. So, if you need to sync users from a second domain,
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Ponbharathi M 0 Reputation points

2024-12-25T08:23:42.6833333+00:00

Shall we user separate separate AD connect server to sync for each forest
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Sync multiple on-prem AD Domian to singe Azure AD tenant

2 answers

Your answer