Migrating SAML Users to Full Azure AD Users: How We Automated It

A company had a number of SAML-only users in Azure AD – accounts that only existed via an external identity provider and weren’t created locally in AD. That needed to change: full users, local and cloud-synchronized.

The Challenge

The migration was complex because multiple steps had to be executed in the correct order. Prone to error when done manually – especially at scale.

The Solution

We fully automated the migration process. The steps: remove the email address from the shared mailbox, create the OnPrem user, trigger AD Connect sync, assign a license, provision the mailbox, then run the standard joiner process. Every step is logged, errors are reported.

The Result

SAML-only users become fully hybrid-synchronized Azure AD users – quickly and without manual errors.

Get in touch