MSOL Federation for non sync'd Entra AD

Version Affected:  All

Description:  

Normally when federating with 0365, there is an AD Sync process between on prem AD and Entra which includes the OnPremisesImmutableID and we use that as part of the WSFed Claim.

However, if there is no sync between the two, the OnPremImmutableID will be blank and cause an error 

Cause:  

No Immutable ID

Resolution:  

1. Populate the OnPremisesImmutableID in Entra with a value that also exists on prem. Ideally this will be something unique and impossible to change.
2.  In the Admin Console, edit the Datastore, set AuxID2 to the AD attribute that matches the value you've used in Step1.
3. Follow this article to complete the rest of the federationhttps://docs.secureauth.com/2404/en/microsoft-365-application-integration.html

SecureAuth Knowledge Base Articles provide information based on specific use cases and may not apply to all appliances or configurations. Be advised that these instructions could cause harm to the environment if not followed correctly or if they do not apply to the current use case.

Customers are responsible for their own due diligence prior to utilizing this information and agree that SecureAuth is not liable for any issues caused by misconfiguration directly or indirectly related to SecureAuth products.