Linking existing MS365 sub with existing Azure sub to enable SSO on MS365 account with AzureAD

Question

Hi, I am currently using a separate MS365 sub and Azure sub. I am trying to see if its at all possible to migrate the MS365 account as is, under the Azure account, to in place activate SSO via AzureAD for theMS365 account

The docs seem to indicate no, but I would like confirmation, or alternative possibilities.

Thank you

Answer 1

Hi @jk • Thank you for reaching out.

When you create M365 account, in the backend it also creates an Azure AD tenant, which contains all the user/group identities for your M365 account. You can access the Azure AD associated with the M365 tenant via https://aad.portal.azure.com via one of your M365 admin accounts.

So, in your case, there are 2 different Azure AD tenants i.e., tenant1 for M365 and tenant2 for the other Azure AD account. You cannot move M365 licenses but you can move Azure Subscription from one Azure AD tenant to another Azure AD tenant. This means you can move the subscription from tenant2 to tenant1 so that all M365 licenses and Azure subscription is linked to the same tenant.

For this purpose, you need to:

1. Add Global Administrator of tenant2 as guest user to tenant1 and assign Global Administrator role in the tenant1 as well.
2. Sign in to tenant2 and use the Change Directory option under Subscription blade to move the subscription to tenant1.

For step by step instructions and considerations, please refer to: Transfer an Azure subscription to a different Azure AD directory

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.