Entra ID - do we need to connect to it?

Hi all,
Bit of a random question. But do I need to connect to Entra if I’m already connecting to AD.
Entra accounts are provisioned by AD-Connect.
All Entra attributes are sync’d to AD which are driven by Sailpoint
Licencing is dealt with by dynamic groups.
Group memberships are done via PS scripts on AD.

I’m asking as the client has +500k users and +500k groups. Aggregating Entra daily (on top of the other sources) for that many accounts is going to be a pig.
Is there anything that I have to connect to Entra for, that can’t be done another way? What am I missing?

Thanks

Hi @phil_awlings ,

It will be based on your requirements to decide whether you need to connect to Entra ID or not. For eg, If you need to provision some Azure only (cloud only) groups then, it can’t be done via on prem AD.
If you have everything that you need in Entra are getting provisioned by the on prem AD, then direct connection to Entra ID is not required.

Thanks

3 Likes

This topic was automatically closed 60 days after the last reply. New replies are no longer allowed.