Azure AD Cross Tenant Synchronisation FIRST LOOK! 

Oh, that’s awesome Michael, congratulations and well done. It was my pleasure to help.

Yeah, Teams audio (sorry)😊

You’re welcome and thank you, Scott

@@AndyMaloneMVP Hi Andy, there appears to be some forced adoption of MFA and number matching. If you are able to slot this into a video, I would find that helpful. Potentially pairing with the Jan 2024 legacy MFA and SSPR policies being deprecated.

@@scottt2481 absolutely 👍

Very welcome😊

It would detect a guest user already exists as it has a unique ID. It would not be overwritten.

Let’s see what happens when it goes general availability. Thanks again.

Thank you 👍

I guess we will find out soon as this feature is currently being rolled out👍😊

This is new so I'm not sure. But I suspect it would be like shared channels where you don't need to login out/in

Thanks Edward as this is in preview, I'm sure this will be addressed in a final release :-)

Here a couple of useful articles that will definitely help you learn.microsoft.com/en-us/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-overview and learn.microsoft.com/en-us/microsoftteams/shared-channels

No this is not a migration tool. It’s a collaboration tool😊

@@AndyMaloneMVP ist there any useful tenant-to-tenant migration tool from microsoft or i should use 3rd party tools. If then which you will suggest?

This is correct. When ever you sync to another tenant, the user account will come in as a guest account. If one already exists it will simply update it and connect to it.. It is weird that your users in your home tenant are guests. Somethings not right with that. I would reach out for technical support on this, or visit the Microsoft Tech community. Either way, I wish you the best

This is the best place :-) learn.microsoft.com/en-us/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-overview

This is done via exchange org sharing

what about the Exchange GAL. will that be an item that can sync? i understand the freebusy aspect is done via org sharing. just lookin or wondering if this would help with GALs being shared Thank you and great stuff

Hey thanks for the question. AAD free is very limited and will not be able to connect to an on prem server. To practice I would just use trial accounts E5 as these contain all the features. Not sure about the eligible message. Try the MS tech community pages for that. Delighted that you’re enjoying my content though 👍😊

Sorry I'm not a sales guy. It's only in preview

Correct it creates guest accounts

You can but it's only collaboration. Creates a dynamic guest account in the partner tenant and removes it afterwards.

@@AndyMaloneMVP Thanks !

You would need to check in your region sorry😊

Intra-cloud sync will be rolled out to GCC High in the next month or so. Cross-cloud sync will come after this initial feature set gets to GA.

Of course, you can add them through dynamic groups. As long as the attributes match, for example, city, department, ECT, then it should work.

@@AndyMaloneMVP Thank you!

In tune managers devices that are Azure AD joined. The users that use these devices must have an appropriate license. Only then does the device appear in in tune, which can then be managed

The account will remain

Yes I believe so👍

@@AndyMaloneMVP ah, I just found in the faq that it's not supported yet. 😭 Fingers crossed its in the works. Great video. Thank you.

I'd checkout learn.microsoft.com for the latest updates on this :-)

This is currently in preview so you’ll need to the read the documentation 🙂

@@AndyMaloneMVP thanks! Another question, if a user identity is deleted in home tenant, does the 2nd Account get deleted?

@@H_Raja as far as I know when you sync a user from another tenant. It creates a synced guest account in the destination tenant. This is dynamic and when the link is disconnected, the users are deleted. Like I said, as far as I know. Again, I would refer you to the documentation on docs.microsoft.com

To be honest, I’ve not looked at this fully yet. I would read the docs.microsoft.com article as listed in the description. As this is currently in beta, there is a strong possibility that it’s not finished or at the very least we don’t not understand its full potential yet. But it is exciting!

P1

P1

The client doesn’t matter. It’s user authentication that matters, so whether you’re coming in from a physical or virtual desktop is irrelevant.

No idea yet sorry.

Honestly, I don’t know. I’d submit a Q to the product teams.

@@AndyMaloneMVP how do i submit question to product team?

@@moussifer if you don’t have an agreement with Microsoft. A great place to get support from is the Microsoft tech community. Alternatively to learn, I strongly recommend that you visit and learn.microsoft.com. It’s packed with training materials and learning documentation you will find invaluable. I wish you the very best of luck, Andy

Corect :-)

It's dynamic. When you delete org. It will delete guest users. Or so I believe. Remember this is a preview.

As you can appreciate this is a new technology. I will check out the Microsoft documentation listed.

You can use a group to determine which users will be provisioned. Provisioning group objects across tenants currently isn't supported.

thanks, Andy for sharing this video, I followed all the steps, but I haven't been able to synchronize user groups. some say it's possible, while others claim it is..¿any updates on this matter? @@AndyMaloneMVP

Officially groups are not supported at the moment as it’s currently in beta. However, watch out for more information soon.

No it’s a collaboration tool. I’d take a look at the documentation 😊 learn.microsoft.com/en-us/azure/active-directory/multi-tenant-organizations/cross-tenant-synchronization-overview

Cross-tenant synchronization creates B2B users, so no password synchronization is required. The user will continue to authenticate in their home tenant.

There are no exams. It’s by invitation only. Check out my MVP video

Don’t be confused by migration versus synchronisation. This is not a migration feature. This is used for collaboration.

@@AndyMaloneMVP no, I’m aware but I feel the tenant to tenant migration is so neglected… it’s classic with Microsoft lately… they try to inovate new things before they fix things which are broken or don’t work well… the tenant to tenant migration is needlessly complicated and even though the endpoints match making it tricky for them… a company trading at this level with as many small businesses right up to large enterprise really should figure this stuff out before creating more tools… Microsoft… fix what’s there first before you add more.

I agree with you unfortunately it’s up to 3rd parties at the moment to provide a decent service. Share gate does a pretty good job. Other than that I’m afraid you’ll have to shop around. Good luck though. Let me know how you get on.

@@AndyMaloneMVP Your right there Andy but sadly it’s the one migration others know Microsoft don’t support well so they all charge! I’ve yet to find a good free 3rd party or supported solution. 😞

Sorry we tried our best

Hi Phil, I understand your point very well. This video is exactly as it was meant to be though a first look at a particular topic for experienced users. I’m sure as time goes on I will develop a how to video. This was a session where I had a meeting online with the product group member who was kind enough to demo the product. This is extremely rare and for one I’m very grateful he did. Many of my videos focus on “the beginner“ and I hope that you’ll find something of use on my channel. Beyond that, of course you could always take paid training, thanks again and all the best, Andy