How it works...
Perform the steps in this recipe before you attempt to implement any of the following recipes. People in your organization might have already accepted invitations from people in Azure AD tenants to work together, for instance, in Power BI. These people already have Azure AD accounts based on their email addresses. After a DNS domain name is verified in Azure AD, these accounts come under the control of the Azure AD tenant.
When you first synchronize between Active Directory and Azure AD, these accounts are automatically reconfigured with the new authentication method. If you synchronize before scooping up these user objects, people might end up with two accounts, which defeats the purpose of SSO. If you synchronize without ...
Become an O’Reilly member and get unlimited access to this title plus top books and audiobooks from O’Reilly and nearly 200 top publishers, thousands of courses curated by job role, 150+ live events each month,
and much more.
Read now
Unlock full access