
How to configure a 3rd party IDP for O365 - Immutable ID
I have an on-premise AD synched to Entra ID using Azure EntraID connect. The synch is working fine.
I have a third party IDP that will be populating and synching it's IDP info with the on-prem AD. (So for example, if a new user is added to the 3rd party IDP, it will automatically be added to the on-prem AD, then automatically synched with Azure Entra ID. (ALL GOOD).
Now when I federate the domain from Azure to the 3rd party ID, and try to login, Entra/Office says the user does not exist. Reading up on this, I understand the 3rd party needs to pass a claim called ???? (docs are not clear here) that will be used as the anchor/immutable ID.
All I am looking for is what bits of data need to be pulled from the on-premise AD into the 3rd party IDP, (we can already pull and push data to/from my 3rd party IDP to on-premise AD), and what transformation (if any) needs to be done to the AD info, and also what is the claim to add to the user's ID token in order for Azure/O365 to recognize the user?
From some articles is seems I should pull the user's objectGUID from AD, then somehow transform it into the Azure OID?? I don't know..
Any help would be appreciated.
Microsoft 365 and Office | Development | Other
