Need to migrate applications to Azure AD

ShashankSaxena-2458 131

Hello All,

We have to migrate about 200 applications from ADFS, Siteminder, OKTA to Azure AD SSO but as we aware that we will not migrate all the application to Azure in a single go. So my question is, if we will migrate 5 application first phase but we don't want to break the SSO of all the applications. How do we achieve this setting where SSO will not break either the application is on Azure or onpremises during the migration process.

Regards,
Shashank Saxena

Siva-kumar-selvaraj 15,636 Reputation points

2021-06-09T18:20:45.987+00:00

Hello @Anonymous ,

Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,

3 answers

Siva-kumar-selvaraj 15,636 Reputation points

2021-05-28T07:00:58.11+00:00

Hello @Anonymous ,

Thanks for reaching out.

Please find below Azure AD application migration resources. Hope this helps.

Develop a risk management strategy for your Azure AD application migration
Five steps for integrating all your apps with Azure AD
Five tips to improve the migration process to Azure Active Directory
Migrate application authentication to Azure Active Directory
Resources for migrating applications to Azure Active Directory

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
ShashankSaxena-2458 131 Reputation points

2021-05-28T14:22:39.867+00:00

Hello @sikumars-msft ,

Thanks for sharing such a helpful URL but through those URL, I didn't get my answer for how to prevent my SSO to be break after the migration.

Regards,
Shashank Saxena
Please sign in to rate this answer.
Siva-kumar-selvaraj 15,636 Reputation points

2021-05-31T18:44:19.157+00:00

I Hope you have Azure AD SSO (Single Sign-on) in-place for your hybrid environment by using either of ways ( federation , Seamless SSO PTA/PHS ), if that's the case then lets say when you migrate 5 of 200 application successfully to Azure AD by considering all best practices per this article then users should continue to experience Single Sign-on behavior without any issue.

Hope this helps. Thanks.

Regards,
Siva

ShashankSaxena-2458 131 Reputation points

2021-05-31T18:52:14.453+00:00

Hello @sikumars-msft ,

Thanks for your time, I have PTA enabled for all the users but if I will enter credential for any one of Cloud Application, it will work for remaining 5 but I have to enter the credential for onpremises application for at least one application, then all other 195 application is working fine, but I need, if I will enter credential for any of the application(either onpremises or Cloud), then it should work for either application.

Is it possible?

Siva-kumar-selvaraj 15,636 Reputation points

2021-06-01T06:41:15.87+00:00

Yes, possible. But, In this case you may have to enable Seamless Single Sign-On (Azure AD Seamless SSO) which can be combined with PTA (Pass-through Authentication sign-in) methods OR Join windows 10/down-level devices to Hybrid Azure AD joined devices so that users don't need to type in their passwords to sign in to Azure AD integrated application, and usually, even not type in their usernames.

This feature provides your users easy access to your cloud-based applications without needing any additional on-premises components.

Hope this helps.

------
Please "Accept the answer" if the information helped you. This will help us and others in the community as well.

ShashankSaxena-2458 131 Reputation points

2021-06-02T12:19:34.617+00:00

Hello @sikumars-msft ,

I have already enabled PTA for all the users and my question is for cross premises application because there we have to enter credential at least 2 time i.e. one for Azure integrate applications and another for on-premises applications, then it will work for all the users and I am considering this issue for external access not from corporate internal network.

Waiting for your response.
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.
Siva-kumar-selvaraj 15,636 Reputation points

2021-07-13T07:15:00.957+00:00

sorry for delayed response.

when yo say external access, are they belongs to same corporate AD domain trust (Multi-forest environments)? if so then PTA SSO should work as long as there is forest trusts (two-way) between your Active Directory forests and users accessing it from domain joined machine with VPN when they access from externally.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-faq#can-i-use-pass-through-authentication-in-a-multi-forest-active-directory-environment-

If you don't have forest trust and users belongs to partner organization external then SSO wont work with this scenario. Hope this helps.
Please sign in to rate this answer.

0 comments No comments
Sign in to comment

Use comments to ask for clarification, additional information, or improvements to the question.

Share via

Need to migrate applications to Azure AD

3 answers

Your answer