Quantcast
Channel: Azure Active Directory forum
Viewing all articles
Browse latest Browse all 16000

Local AD group synchronization to AAD

$
0
0

Hi All,

We have a requirement to synchronize our local AD Groups into AD Azure cloud.

We already have Microsoft Azure AD Sync tool to synchronize local AD users into AD Azure cloud and it's working fine.

To achieve this requirement, I have done required setup and I am able to see groups in AD management agent Connector space. However I am facing issue to synchronize group to MV during inbound synchronization. After looking into inbound synchronization rule, I found the attribute flow defined for sourceAnchor in "In from AD - Group Common" rule is actually creating problem.

Attribute Flow is:

sourceAnchor -> ConvertToBase64([objectGUID])

I am getting below error while running sync preview:

<extension-error-info><extension-name>SyncRulesEngine</extension-name><extension-callsite>not available</extension-callsite><extension-context>not available</extension-context><call-stack>An error occurred, ..\ObjectNamespace.cpp(1035), code 80230504,


   at ObjectNamespace.GetCSObject(IEntryModification modification)
   at ManagedSyncRulesEngine.PersistGraphObjects(ManagedSyncRulesEngine* , IObjectLinkGraph graph, CCsObject* sourceCsObject, IEntryModification mvEntry, List`1 allCsEntries)
   at ManagedSyncRulesEngine.PersistGraphToDatabase(ManagedSyncRulesEngine* , IObjectLinkGraph graph, CCsObject* csObject)
   at ManagedSyncRulesEngine.Synchronize(ManagedSyncRulesEngine* , CCsObject* sourceCsObject, CMvObject* mvObject, SynchronizationOperation operation, UInt16** error)


InnerException=&gt;
none</call-stack></extension-error-info>

However when I remove sourceAnchor attribute flow then Synch Preview does not throw any error at all.

As provisioning of group in AAD is not possible without this attribute hence I am not able to move further.

I also tried below attribute flow but nothing is working:

sourceAnchor -> objectGUID

sourceAnchor -> sAMAccountName

sourceAnchor -> ConvertToBase64([sAMAccountName])

FYI,

Below is the value defined for objectGUID in CS for one of the groups which is throwing above mentioned error:

objectGUID,binary,2F AF 4A 35 A1 C9 21 43 8E 18 EE 11 71 31 79 61 

Could anyone please help me to resolve this issue.

Thanks in advance!!



Viewing all articles
Browse latest Browse all 16000

Trending Articles



<script src="https://jsc.adskeeper.com/r/s/rssing.com.1596347.js" async> </script>