4

I want to create a Sharepoint 2016 site. For this I will first install Sharepoint 2016 on a VM. I would like users to log into the Sharepoint 2016 site using their Office 365 credentials so that I do not have do any kind of Identity Mangement. Is this possible in SP2016 ? Need help?

NOTE: My Sharepoint 2016 is a on premise installation on a single VM (single farm install). I want my fellow employees to use our organizational office 365 account to sign-in to my sharepoint site. I am newbie to Sharepoint. So it would be nice if you could outline the steps and point me to any documentation for details. Thanks.

Improve this question

2 Answers 2

Reset to default
3

First of all,

SharePoint Online works with the login name using UPN (user principle name) which is in most cases it will the user's email ID. so if your login ID is same as UPN (Microsoft's recommendation for Office 365 Identities) then you can use the same login name (i.e, Email ID and earlier it used to be firstname_lastname, Employee ID etc.. as per your organization infrastructure best practices) to login in to SharePoint 2016 as well.

Note:

You need to update and maintain the UPN before setting up the Office 365 tenant for your organization as part of pre-configuration process. You can refer the below articles but you may google more as well

Reference Link-1

Reference Link-2

I personally tested this in 2010 and 2013 as well and i dont see any problems while login in to the on-premises versions of SharePoint.

Also, I assume you might have already planned for Directory Sync for Office 365 which will enforce and maintain the policies, credentials both in cloud and on-premises Active Directory as identical.

Improve this answer
6
  • 1
    What you've described is a work around, but I don't think accurately answers the question. The question boils down to 'can you use an Azure AD identity to log into on-prem SharePoint'. Obviously if you're simply using a UPN, you're just leveraging AD and not Azure AD...
    – user6024
    Jun 7, 2017 at 20:29
  • 1
    @TrevorSeward not really. thats the best articulated answer for the question. the question doesnt talk about any Azure AD or something else. the main point of the question is how to use same O365 credentails with out additional effort and more over it's not a work around and its a must for Office 365.
    – kesava
    Jun 7, 2017 at 20:34
  • 1
    You should understand that Azure AD is the source objects for O365; AAD Connect does not go AD -> O365 directly, rather O365 leverages Azure AD. In addition, it is possible to have Azure AD only objects (B2B, B2C, "cloud only"), which in your scenario will not function on-prem. For a scenario like this, we'd need to look into, for example, Azure ACS.
    – user6024
    Jun 7, 2017 at 20:36
  • @TrevorSeward not sure if you have read my answer clearly. i also mentioned about the directory sync which means the login credentails from on-premises AD will be replicated to Azure AD can be used even to login in to office 365 with or without federation-ADFS. so the same login credentails applies to either on-premises Sharepoint servers or Office 365. and also, i am totally aware of cloud only accounts.
    – kesava
    Jun 7, 2017 at 20:49
  • I read your answer, but I think you're misunderstanding the concept based on the original posters current wording of using Azure AD (aka O365) credentials on-prem. This does not involve Active Directory, nor should it be conflated with Active Directory.
    – user6024
    Jun 7, 2017 at 20:50
1

I was finally able to achieve what I wanted to using auth0's Sharepoint Integration feature. In order to connect with organizational O365 account, I had create a auth0 enterprise connection with Azure AD My sharepoint site does not need to know anything more than the user's email address and hence I do not need to read any private info from AD. If more info needs to be read from AD then one would require permission from administrator who manages the org's O365 accounts.

Improve this answer

Your Answer

By clicking “Post Your Answer”, you agree to our terms of service and acknowledge that you have read and understand our privacy policy and code of conduct.

Not the answer you're looking for? Browse other questions tagged or ask your own question.