how to sync on-prem gMSA with Azure Active Directory?

Question

Is this even possible today?

Answer 1

@A Lee Thanks for reaching out.

On prem GMSA are not synced to azure AD as of today. Many of the azure services utilize AAD managed identity for Authentication and since we don't sync it, the GMSA never really gets any AAD specific Identity to use for Azure services.

If you have Azure AD Domain Services, you can create a GMSA there if it fits your need.
https://learn.microsoft.com/en-us/azure/active-directory-domain-services/create-gmsa

---------------------------------------------------------------------------------------------------------

Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Yes. I also receive confirmation from Microsoft about it.