We've been in the business for over seven years, working entirely with Azure AD for the first five. As a fully remote company, we didn't have physical offices until three years ago. Recently, we've started acquiring companies that come with their own outdated on-premises Active Directories (AD). Our goal is to eliminate these legacy ADs and establish a single Active Directory that integrates with our Azure AD. We're looking for guidance on how to achieve this transition, especially since we have various services at each location that rely on authentication. Any tips on how to handle this?
1 Answer
You might want to check out the new EntraID Cloud Connect, which helps with syncing multiple domains to one Azure tenant. This could be a way to onboard those companies into your Azure setup. After that, you can consider decommissioning the old on-prem ADs if you want to move completely to the cloud. If keeping some aspects on-prem is necessary, you could just utilize the Cloud Connect for ongoing needs.
We’re actually trying to avoid linking those old domains to our Azure tenant because they lack proper security and are hard to manage. Our aim is to set up a completely new AD infrastructure at each site connected to Azure AD instead, but we’re unsure if that’s possible.