How we can sync on premise active directory data with Azure AD via graph API

Arpna 131 Reputation points
2021-09-17T12:01:43.543+00:00

We are having on premise employee directory and now planning to move to Azure AD. How we can sync the details of all employees to Azure using graph API, and provide them access to hardware and network.

We basically want to sync Entries, Computer, user, Group, InetOrgPerson, OU present in local AD to Azure AD.

Microsoft Graph
Microsoft Graph
A Microsoft programmability model that exposes REST APIs and client libraries to access data on Microsoft 365 services.
11,126 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,191 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,466 Reputation points
    2021-09-20T07:31:16.113+00:00

    Hi @Arpna • Thank you for reaching out.

    Graph API can NOT be used to sync the identities from On-premises AD to Azure AD. Using Graph API, you can create/read/update/delete objects in Azure AD, but you cannot sync the objects using Graph.

    To sync objects from On-premises AD to Azure AD, the recommended tool is Azure AD Connect. You can use it to sync Users, Groups and Computer objects but not OUs as Azure AD doesn't support the concept of OUs.

    Read more: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express

    -----------------------------------------------------------------------------------------------------------

    Please "Accept the answer" if the information helped you. This will help us and others in the community as well.


0 additional answers

Sort by: Most helpful