I'm looking at using azure active directory domain services to replicate our accounts upto Azure in order to be able to use our local domain accounts to authenticate against services like dropbox, dynamics CRM and possibly google apps. Ive installed the connect software and all of the accounts have been pulled in.

some of the articles i have seen talk about setting dns records up on the public fqdn but we do not have one, we run mydomain.lan

Is it possible to get these accounts to authenticate in Azure if no domain?


The answer is yes, but it will be synchronized to your .onmicrosoft.com domain name.

see this explanation.


In short if you want to synchronize to a public custom domain such as -ed-baker.co.uk you need to ensure the users to sync have a UPN containing a publically routable domain name.

To do this you can either use PowerShell or the Users and Computers gui (or ADAC if using a server that has it installed)

If not you will get users synched to your Microsoft online default domain.

Hope that helps, please mark as the answer if it does.



| improve this answer | |

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service, privacy policy and cookie policy

Not the answer you're looking for? Browse other questions tagged or ask your own question.