A cloud-based identity and access management service for securing user authentication and resource access
Hi @dirkdigs • Thank you for reaching out.
This can be done via Soft-match. Soft-match is used to match existing cloud users in Azure AD with on-premises users. As you have mentioned, there are cloud-only users with mailbox configured in Exchange Online, I would suggest you to do a soft-match using SMTP address as described here: How to use SMTP matching to match on-premises user accounts to Office 365 user accounts for directory synchronization
If you need to match on-premises AD accounts with existing accounts created in the cloud and you are not using Exchange Online, you can use UserPrincipalName soft match. Please refer to UserPrincipalName soft match for more details.
-----------------------------------------------------------------------------------------------------------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.