Hi,

We have one requirement to integrate/move  users/groups from  multi-forest, multi-domain AD environment to Azure Active directory and manage the password of users. I knew that FIM provides the AAD connector to move the user/groups object  to AAD. Request you please suggest me for the below.

1. Where we need to deployee FIM - On premise or on cloud? 

2. Whats are the others main things we need to consider  for solution.

3 What about the FIM SSPR. Does it support the password reset on AAD.

4. is there any document for it?

Thanks

Harry

   

• Edited by Harry-Harry Wednesday, July 29, 2015 2:12 PM

AAD Sync and AAD Connect both support multi forest synchronization scenarios as well as password sync.

https://azure.microsoft.com/en-us/documentation/articles/active-directory-aadconnect/
http://blogs.technet.com/b/ad/archive/2014/04/21/new-sync-capabilities-in-preview-password-write-back-new-aad-sync-and-multi-forest-support.aspx

• Edited by Cameron Zivkovic Friday, July 31, 2015 1:37 AM