SBS 2011 - ADFS - Office 365

davidking1063 · 2014-12-16T17:45:54.000Z

Hi All,

After some guidance on this please.

I have an SBS 2011 server with 75 users that I need to migrate to Office 365 but still use AD on premise. I believe you require ADFS and Dirsync. What I am trying to work out is if I use a cutover migration this creates the mailboxes and users for me (I believe), so do I install Dirsync before or after the cutover migration? Will it create new users on top of the ones the cutover migration has created?

At the end of the day I just want single sign on and the usernames and passwords to be in sync across both platforms. There seems to be a lot of conflicting advice online.

Any help appreciated

Cheers
Dave

norcalwingman · 2014-12-16T18:05:37.000Z

pretty sure you won’t need ADFS for that. We just use dirsync.

We do leverage OKTA for our IDm though.

davidking1063 · 2014-12-16T18:34:35.000Z

Need seamless passwords from Windows logins, outlook and OWA. Out of sync passwords will just be hard to manage. I think I use ADFS for that? Anyway I think I have found advanced setup tells me what to do and when, only used basic setup before (from inside office 365)

DragonsRule · 2014-12-16T20:05:37.000Z

dirsync handles passwords just fine as long as you only change them from the AD side of things. dirsync is one way - from AD to O365.

stevez · 2014-12-16T20:30:40.000Z

SBS with 75 users is a little bit maxed out anyway. You might want to get Windows Server Standard running. But odds are you want DirSync. ADFS is overly complicated for most small businesses.

da-schmoo · 2014-12-16T20:42:26.000Z

With the password sync feature added to Dirsync a few months ago, there is no reason to use ADFS in most cases. It will be moot in the next month or so when they retire Dirsync in favor of their new Azure sync thing - I forget the proper name of it but the preview is available now.

DragonsRule · 2014-12-16T20:44:52.000Z

Da_Schmoo:

the next month or so when they retire Dirsync in favor of their new Azure sync thing

Oh? Do you have any more info about that? We’re using Dirsync.

da-schmoo · 2014-12-16T20:47:11.000Z

Ha! Can’t believe I actually remember where I read it!

ZDNET

Microsoft remakes its Active Directory tool for linking Windows Server, Azure

Microsoft has released a new public preview of Azure Active Directory Connect, a tool for connecting Windows Server AD to Azure AD. It will replace DirSync and the standalone Azure AD Sync tools.

davidking1063 · 2014-12-16T21:01:55.000Z

Thanks! So my question is will cutover migration create my users for me on Office 365? Or should I dirsync first? Also if I dirsync first will cutover migration see their email address and know it is the right user? The only reason I ask is I read someone blog that dirsync should only be used after migration? But as I said theres a lot of conflicting articles out there.

Appreciate all of the advice!

p.e. theres actually 91 users! We have purchased Windows 2012 and will be making it a DC and seizing the roles then using Office 365 instead of full Exchange.

davidking1063 · 2014-12-17T18:18:12.000Z

anyone?