Hybrid Azure AD and Multiple Forests

Question

Hi,

We are planning to sync our on-premises AD to Azure using Azure AD Connect. We want to do this in an isolated manner. We have three domains, and each should be synced independently, without depending on the other domains. What is the right way to accomplish this?

Kind regards,

Murat

Answer 1

Well, if you want to use AADConnect, that is the only supported config.

If you want to use AADConnect and Azure AD Cloud Sync, then you can do what you want.

In other words, one forest has AADConnect, the others have Azure AD Cloud Sync

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/cloud-sync/what-is-cloud-sync

Answer 2

3 domains or 3 forests?

I assume AD forests. You can do this, since each forest SHOULD have unique values.

You can see it's supported here:

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/connect/plan-connect-topologies#multiple-forests-single-azure-ad-tenant