Hi,

We have one requirement to integrate/move  users/groups from  multi-forest, multi-domain AD environment to Azure Active directory and manage the password of users. I knew that FIM provides the AAD connector to move the user/groups object  to AAD. Request you please suggest me for the below.

1. Where we need to deployee FIM - On premise or on cloud? 

2. Whats are the others main things we need to consider  for solution.

3 What about the FIM SSPR. Does it support the password reset on AAD.

4. is there any document for it?

Thanks

Harry

   

• Edited by Harry-Harry 17 hours 14 minutes ago

1. Where we need to deployee FIM - On premise or on cloud? 

Answer: On premise.

2. Whats are the others main things we need to consider  for solution.

Answer: Unique sAMAccountName, since you are migrating from multiple domains.  You may have duplicate sAMAccountNames and you will need to rename them before migrating them

3 What about the FIM SSPR. Does it support the password reset on AAD.

Answer: I dont think so.  Why not do the SSPR on their native domain and sync the password to Cloud?

4. is there any document for it?

Answer: Google.com, TechNet.com, :)