LDAP authentication with Azure Active Directory

Question

Hello,

I am working on use case where I need to sync on premises Active directory with Azure AD directory.

I am referring below documentation to perform use case.

https://learn.microsoft.com/en-us/azure/active-directory/fundamentals/auth-ldap

But due to organizational policies/Security risks , I am unable to create Azure AD domain services. Is there any best practices to perform and test Azure AD sync with LDAP which considering constraints.

I have VM and it has own active directory. Can we integrate this with Azure AD without touching to organizational common Active directory.

Any help is appreciated.

Thanks,
Swapnil Borikar

Answer 1

Hello @Borikar, Swapnil (DI SW DM R&D-MOM CORE R&D IND) and thanks for reaching out. Azure AD does not implement LDAP, that's why an Azure AD Domain Services, which supports LDAP and updates to (not from) Azure AD, is required. Now, if your goal is to sync your on-premises directory with Azure AD you only need to implement Azure AD Connect. On premise user will be able to authenticate to both cloud applications using modern protocol such as OAuth2 and to on-premises applications that implement legacy protocols such as LDAP, Kerberos or NTLM.

Let us know if you need additional assistance. If the answer was helpful, please accept it and complete the quality survey so that others can find a solution.