0

The majority of Azure clients are migrating from On-Prem DevOps Server to Cloud DevOps Services. Due to a unique project requirements my organization must do the opposite and transition from Cloud DevOps Services to On-Prem DevOps server.

Our blocker is that we wish to sync Azure Cloud AD to an Azure DevOps On-Prem Server to allow for AD synced windows authentication or AD synced Oauth. Users will then login through the web https interface to the On-Prem server with their Cloud AD credentials. (Essentially the opposite process of AD-Connect)

I have tried:

  1. .NET client libraries (Only provides REST API data)
  2. First RDP through Azure account stores GUID followed by net localgroup users AzureAD\clouduser /add (Adds AD user GUID to local groups but doesn't sync with the cloud) Link
  3. Enabling OAuth through this library (No DevOps Server API endpoints are documented) Link
  4. Trying AD-Connect to work in reverse (No support)

This seems like a common issue but I can't seem to find any related documentation or forum posts.

0 Answers0