Connecting On-Premise AD from China possible to Global Azure AD?

Question

Hi,

We plan to setup the on-premise AD and sync it to the global Azure AD in a single tenant.

The challenge is one of the existing on-premise AD is located in China.

Each on-premise AD on the respective region have their own Domain name.

Is it possible to sync the identity in on-prem AD China to the Global AD tenant?

I have check from the interoperability with China Azure from the link below. But I did not find the topology based on the plan they have. (refer screenshot below).

https://learn.microsoft.com/en-us/azure/china/overview-connectivity-and-interoperability

On another note, if we create another tenant in China (via 21vianet, can it connect with the global tenant?

from the docs, it mention its possible with Azure VPN gateway on both tenant. Appreciate if you can confirm this.

Regards,

Dan

Answer 1

@Rusydan (Dan) Thank you for reaching out to us, diagram you mentioned above for Multiple forests (located in China, Singapore, Malaysia) connecting to single Azure AD tenant - Yes, this scenarios is supported and public documented at https://learn.microsoft.com/en-us/azure/active-directory/hybrid/plan-connect-topologies#multiple-forests-single-azure-ad-tenant

Is it possible to sync the identity in on-prem AD China to the Global AD tenant? - Yes, this is possible.

Let me know if you have any further questions, feel free to post back.

Please remember to "Accept Answer" if answer helped, so that others in the community facing similar issues can easily find the solution.