August 15, 2017
| posted as
Active Directory, Azure AD
- You have an MSOL user to match with its Active Directory (AD) object
- Your alias changes in your AD is not occur in Admin Center
- You are having issue following DirSync soft matching found in Microsoft documentation
Soft-matching is another word for SMTP matching. In addition, it is a method to match on-premises user accounts to Office 365 user accounts for directory synchronization
In this example, we will use the made up object below to apply DirSync soft matching method.
- firstname.lastname@example.org (Msol Cloud object)
- Donna.email@example.com (On-prem AD object)
Firstly, you will have to enable AD Users and Computer (ADUC) advance feature.
- Access your On-Prem Active Directory> ADUC
- View Tab> Advance Features should be checked
- Navigate to the impacted users account
- Right Click > Properties
After that, apply or confirm below details in the Account & Attribute Editor tab.
- Go to account tab> Change user logon name to the cloud UPN
- Click on Attribute Editor > Change the following
- Mail to firstname.lastname@example.org (Cloud)
- userPrincipalName to email@example.com (Cloud)
- proxyAddress to SMTP:firstname.lastname@example.org (Cloud)
- Target address to email@example.com (Cloud)
- Note: SMTP is the primary
Lastly, you will have to confirm the changes and force an AD connect synchronization.
- Click OK and Apply
- Run Delta Sync
- On your Active Directory server
- Open a PowerShell session
- Type in: Start-ADSyncSyncCycle -Policytype Delta
- Check Synchronization Service > Exported (onmicrosoft.com) > Updates
- Ensure that 0 minute is showing as last sync time. On admin center > Home > DirSync Status card
Still not matching? Try doing a Hard-Matching.