On Demand Migration Current - Active Directory - Directory Sync For Multi-Geo Tenants Quick Start Guide

Configure Directory Sync Workflow

On Demand Migration Directory Sync

This section explains how to add a Microsoft 365 tenant and configure a Migration project using On Demand Migration. During project setup, an Office 365 Global Administrator account is initially required to add each tenant to the project.

How to add a Microsoft 365 tenant

Follow these steps to add each Microsoft 365 tenant for On Demand Migration. If there is an existing tenant from another project, it can be reused. 

1. Log in to On Demand.

2. Navigate to Tenants.

3. Click the Add Tenant button.

4. On Demand supports both Commercial and GCC High tenants. For the purpose of this guide, choose Add Commercial or GCC Tenant and choose OK.

5. Log in to Microsoft 365 with a Global Administrator account for the source tenant.

6. Accept the requested Application Permissions.

7. Click Finish.

8. Repeat steps 2 – 8 for the target tenant.

Setting up the Directory Sync Environments

Follow these steps to setup the Directory Sync Environments.

1. Log in to On Demand.

2. Navigate to Migration.

3. Create a new migration project by click Create Project.

4. Provide a migration project name and select the source and target tenant in the project wizard and click Save and Continue.

   

5. Click Save and Continue again and click Finish and Close.

6. Click on Directory Sync from the Project Dashboard.

     

7. Once the On Demand Migration Active Directory module is loaded, click on the Directory Sync icon in the main dash view.

            

8. Click Environments in the left navigation menu to display the environment page.

   

9. Click New to open the environment wizard.

10. Select Cloud and click Next.

    

     

11. Type the name of the cloud environment and click Next.

12. Click on Add Commercial or GCC tenant.

    

13. Enter the tenant Admin Credential and accept the consents.

    

14. Click Next.

15. Configure the cloud environment filter group and click Next.

16. Select the “Include Objects Synchronized with a Local Active Directory via Microsoft Entra Connect” option if you wish to include Hybrid Objects. For the purpose of this guide, we will leave this option unchecked and click Next.

17. Review the environment summary and click Finish.

18. Repeat Steps 7-15 for the target tenant.

     

Configure Directory Sync Template

This section provides a step-by-step guide on how to configure the Directory Sync Template.

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Click the Directory Sync icon.

4. Click the Templates link via the hamburger menu.

   

5. Click New and bring up the Template Wizard.

6. Enter the name and description for the template and click Next.

7. Select Cloud for source environment type and click Next.

8. Select Cloud for target environment type and click Next.

9. Configure the Users Synchronization options and click Next.  For the purpose of this guide, use the default options.

10. Configure the Groups Synchronization options and click Next.  For the purpose of this guide, use the default options.

11. Configure the Office 365 Groups and Teams Synchronization options, click Next.  For the purpose of this guide, use the default options.

12. Configure the Contacts Synchronization options and click Next.  For the purpose of this guide, use the default options.

13. Specify the default user password and click Next.

14. Click New on the mapping template to include the PreferredDataLocation(PDL) attribute to synchronize Multi-Geo enabled User objects. Include the MailboxRegion attribute to synchronize Multi-Geo enabled Unified Groups.

    1. PreferredDataLocation – User Objects

       

    2. MailboxRegion – Unified Groups

       

15. Review the template summary and click Finish.

     

This section provides a step-by-step guide on how to deploy and configure the Directory Sync Workflow.

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Click on the Directory Sync icon.

4. Click on New under Workflow and bring up the workflow wizard.

5. Enter the workflow name and click Next.

6. Select the environments and click Next.

7. Select One Way Sync and click Next.

8. The workflow wizard will have four(4) workflow tasks pre-selected, they are Read, Match, Stage and Write. We will need to configure all 4 tasks.

   1. Read – Select the environments from which you wish to read the objects.

   2. Match – This is the step where you will decide how to match existing objects across your Microsoft Entra directories. Matching is conducted by pairing sets of attributes to find corresponding objects.  Your two (2) environments may already have some attributes that can be used to find similar objects between the different directories, or you may need to populate some to ensure accurate matching.  For a successful Directory Synchronization, it is most important that existing objects are correctly matched.

      For the purpose of this guide, DisplayName and Name will be used for matching.

      

   3. Stage – Configure how objects are synced using the sync template.

      1. Select the Sync Template, click Next.

      2. Select the source environment, click Next.

      3. Select the target environment, click Next.

      4. Choose the target domain name, click Next.

      5. Configure any Stage Data filters. It is highly recommended to setup a filter to limit the scope when performing a test on the first sync as part of the validation.  click Next.

      6. Review the stage data summary and click Finish.

   4. Write – Specify the environment you want the changes to be applied to and click Next.

9. Configure the Sync Interval. For the purpose of this guide, select Manually and click Next.

10. Configure the Sync Alert. For the purpose of this guide we do not want to setup any alerts.  Click Skip.

11. Review the workflow summary and click Finish.

Synchronize the Objects

This section explains how to configure multi-geo enabled test objects, perform the synchronization, and validate the results.

Prepare The Objects

This section provides a step-by-step guide on how to configure multi-geo enabled objects.

1. Setup a multi-geo test user in the source tenant, we will configure the object in Japan Azure Region.

2. Create a user in the source tenant and set the PreferredDataLocation(PDL) value to “JPN”.

   Get-MsolUser -SearchString ODMADMEU1 | set-MsolUser  -PreferredDatalocation JPN

3. Verify the Microsoft Entra ID User’s PDL is set to “JPN”

   

4. Verify the user mailbox region is set to “JPN”.

5. Setup a multi-geo test Team in the source tenant, we will configure the object in Europe Azure Region.

6. Set the Team’s Unified Group PreferredDataLocation(PDL) to “EUR”.

   Set-UnifiedGroup -Identity ODMADGEOGrp -MailboxRegion EUR

7. Verify the unified group mailbox region is set to “EUR”.

   

Important Tip: To find out more on how to enable Multi-Geo capabilities in your Microsoft 365 Tenant, please refer to this Microsoft Link for more detail.

Sync The Objects

This section provides a step-by-step guide on how to perform the workflow synchronization. 

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Select the Directory Sync icon.

4. Select the workflow configured and click Run.

5. Allow the workflow execution to complete.