Univention Bugzilla – Bug 48641
Discover and connect existing Office365 users with ucs users
Last modified: 2021-02-24 09:48:48 CET
+++ This bug was initially created as a clone of Bug #44749 +++ Almost all customers that use the Office365 connector have asked for the possibility to connect existing Office365 users to existing ucs users. We described how to do the process manually here: https://help.univention.com/t/ucs-office365-issue/7209
Created attachment 10219 [details] script to connect existing UCS users to existing Azure AD users
Created attachment 10628 [details] script to connect existing UCS users to existing Azure AD users v2 New version of the script, support for multiple ad connections added. Example call: There is a testuser uid=test03, and an Azure user aaduser_03@somedomain.onmicrosoft.com. test03 should be connected, and the ad connection in UCS is the default 'defaultADConnection'. The user has no mailPrimaryAddress set in UCS, and is not activated for O365. We have to configure a mailadress, and choose to set the uid as the localpart, and use a maildomain that is configured in UCS, in this case 'mydomain.intranet' ./o365_connect_azure_to_ucs_user -p aaduser_03@univentiontestgmbh.onmicrosoft.com -u test03 --set_mail --maildomain mydomain.intranet --mail_localpart_from_uid -a -c defaultADConnection This is the default run, to really modify the user add --modify to the call. Disclaimer: Test this with testusers first, and double check every connected user. The modification will set the immutableID in the Azure AD, the script can only be called once for every user. To reset the immutableID in Azure, powershell on Windows can be used.