Foreign Security Principals - Azure AD Sync

[Paul C_1]

Hi,My AD Forest (AD_Forest_EUR) is part of an M365 Tenant alongside the separate AD Forest (AD_Forest_NA) of our parent company. A two-way transitive trust exists between AD_Forest_EUR and AD_Forest_NA and both forests sync up to Azure via a single Azure AD Connect instance located in AD_Forest_NA.Within the M365 tenant, Self Service Password Reset (SSPR) is selectively enabled for all members of a security group located in a sub-domain of AD_Forest_NA. We want SSPR to work for the users in AD_Forest_EUR so we nested a group from that forested into the security group which is located in the su

Continue reading...