On Demand Migration Current - Microsoft Entra ID Device Join Quick Start Guide

Setting up the Directory Sync Cloud Environment

1. Click Environments in the left navigation menu to display the environment page.

2. Click New to open the environment wizard.

3. Select Cloud and click Next.

4. Type the name of the cloud environment and click Next.

5. Click on Add Commercial or GCC tenant.

6. Enter the tenant Admin Credential and accept the consents.

   

7. Click Next.

8. Configure the cloud environment filter group and click Next.

9. Select the “Include Objects Synchronized with a Local Active Directory via Microsoft Entra Connect option if you wish to include Hybrid Objects.  For the purpose of this guide, we will leave this option unchecked and click Next.

10. Review the environment summary and click Finish.

Important Tip: When migrating devices between two Microsoft Entra tenants without Local On-Premise Active Directory, please add both source and target tenant as Cloud environments.

Configure Directory Sync Template

This section provides a step-by-step guide on how to configure the Directory Sync Template.

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Click the Directory Sync icon.

4. Click the Templates link via the hamburger menu.

5. Click New and bring up the Template Wizard.

6. Enter the name and description for the template and click Next.

7. Select Local for source environment type and click Next.

8. Select Cloud for target environment type and click Next.

9. Configure the Users Synchronization options and click Next.  For the purpose of this guide, use the default options.

10. Configure the Groups Synchronization options and click Next.  For the purpose of this guide, use the default options.

11. Configure the Contact Synchronization options, click Next.  For the purpose of this guide, use the default options.

12. Specify the default user password and click Next.

13. Configure the Attribute mappings, click Next.  For the purpose of this guide, use the default options.

14. Review the template summary and click Finish.

Important Tip: If you do not wish to create objects in your target environment, please choose “Skip” or “Do Not Create” option for each object type.

Configure Directory Sync Workflow

This section provides a step-by-step guide on how to deploy and configure the Directory Sync Workflow.

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Click on the Directory Sync icon.

4. Click on New under Workflow and bring up the workflow wizard.

5. Enter the workflow name and click Next.

6. Select the environments and click Next, for the purpose of this guide, please select the Local and Cloud environments added in the above step.

7. Select One Way Sync and click Next.

8. The workflow wizard will have four(4) workflow tasks pre-selected, they are Read, Match, Stage and Write. We will need to configure all 4 tasks.

   1. Read – Select the environments from which you wish to read the objects.

   2. Match – This is the step where you will decide how to match existing objects across your Microsoft Entra ID directories. Matching is conducted by pairing sets of attributes to find corresponding objects.  Your two (2) environments may already have some attributes that can be used to find similar objects between the different directories, or you may need to populate some to ensure accurate matching.  For a successful Directory Synchronization, it is most important that existing objects are correctly matched.

      For the purpose of this guide, DisplayName and Name will be used for matching.

      

   3. Stage – Configure how objects are synced using the sync template. The Stage data step is required and if you do not wish to create any objects in the target environment, you may modify the template option and select “Skip” or “Do Not Create” for each object type.

      1. Select the Sync Template, click Next.

      2. Select the source environment, click Next.

      3. Select the target environment, click Next.

      4. Choose the target domain name, click Next.

      5. Select the Source Organizational Units, for the purpose of this guide, select the OUs you have defined in the Local Environment which contains your in-scope Users, Groups and Devices. Click Next.

      6. Configure any Stage Data filters by double-clicking the OUs. It is highly recommended to setup a filter to limit the scope when performing a test on the first sync as part of the validation.  click Next.

      7. Review the stage data summary and click Finish.

   4. Write – Specify the environment you want the changes to be applied to and click Next. This task can be removed from the workflow if you do not need to create any objects in the target environment.

9. Configure the Sync Interval. For the purpose of this guide, select Manually and click Next.

10. Configure the Sync Alert. For the purpose of this guide, we do not want to setup any alerts.  Click Skip.

11. Review the workflow summary and click Finish.

Running Directory Sync Workflow and validating the sync results

This section provides a step-by-step guide on how to synchronize the objects between source and target environment using the workflow created in this guide. 

1. Log in to On Demand.

2. Navigate to Migration, select the project, and click on Directory Sync.

3. Click on the Directory Sync icon.

4. Select the workflow created and click Run button.

5. Allow the workflow run to complete.

6. Select the workflow created and click Run button again. 

Important Tip: This step is needed to ensure all the objects created in the target tenant will be matched to the source objects.

7. Click the Environments link via the hamburger menu.

8. Select the Local On-Premises AD environment and click on Details.

9. Confirm source devices are discovered, users and groups have matching objects in the target environment.