Mastering Identity and Access Management with Microsoft Azure
上QQ阅读APP看书,第一时间看更新

Azure Active Directory and Microsoft Office 365 synchronization

The following scenario works for the most Office 365 services because every service uses its own directory inside of the Azure AD to store and manage identities. In particular, with SharePoint, we need many additional attributes in the User Profile Application, but you can't configure the sync between Azure AD and SharePoint Online. You can find all the default attributes at https://support.office.com/en-us/article/information-about-user-profile-synchronization-in-sharepoint-online-177eb196-5887-43c9-84c3-b98a43d35129. The following diagram shows the SharePoint Online synchronization scenario in a schematic view:

Azure AD to User Profile App synchronization extension

One option is to extend the synchronization part with your solution, using the Microsoft Azure AD Graph API. In our case, we used a complete serverless solution based on Azure Functions and Logic Apps.