The majority of Azure clients are migrating from On-Prem DevOps Server to Cloud DevOps Services. Due to a unique project requirements my organization must do the opposite and transition from Cloud DevOps Services to On-Prem DevOps server.
Our blocker is that we wish to sync Azure Cloud AD to an Azure DevOps On-Prem Server to allow for AD synced windows authentication or AD synced Oauth. Users will then login through the web https interface to the On-Prem server with their Cloud AD credentials. (Essentially the opposite process of AD-Connect)
I have tried:
- .NET client libraries (Only provides REST API data)
- First RDP through Azure account stores GUID followed by
net localgroup users AzureAD\clouduser /add
(Adds AD user GUID to local groups but doesn't sync with the cloud) Link - Enabling OAuth through this library (No DevOps Server API endpoints are documented) Link
- Trying AD-Connect to work in reverse (No support)
This seems like a common issue but I can't seem to find any related documentation or forum posts.