Microsoft 365 Certified: Administrator ExpertImplement and manage Microsoft Entra IDHard
A company is migrating its on-premises Active Directory Domain Services (AD DS) users to Microsoft Entra ID. They want to ensure that user accounts synchronize correctly and that their UPNs (User Principal Names) match the format 'user@contoso.com' in Microsoft Entra ID. Currently, some on-premises UPNs are 'user@contoso.local'. Which step should be taken BEFORE deploying Microsoft Entra Connect to achieve the desired UPN format?
- AAdd and verify the routable domain 'contoso.com' in Microsoft Entra ID.
- BConfigure a custom domain in Microsoft Entra ID.
- CConfigure attribute writeback in Microsoft Entra Connect.
- DChange the UPN suffix on-premises to 'contoso.com' for all affected users.
Show answer & explanationAnswer & explanation
Correct answer: D. Change the UPN suffix on-premises to 'contoso.com' for all affected users.
To ensure that UPNs match 'user@contoso.com' in Microsoft Entra ID and avoid issues, the on-premises UPN suffix for all affected users should be changed to a routable domain (e.g., 'contoso.com') that has also been added and verified in Microsoft Entra ID. This is a critical prerequisite to ensure a smooth synchronization and proper sign-in experience.
Why the other options are wrong
- A. Adding and verifying the domain 'contoso.com' in Microsoft Entra ID is a necessary step, but it must be combined with changing the on-premises UPN suffixes for users to match it.
- B. While a custom domain is needed, simply configuring it doesn't change the on-premises UPNs that are being synchronized.
- C. Attribute writeback is for synchronizing changes from Entra ID back to on-premises AD, not for initially setting the UPN format during the initial sync.
Microsoft Entra Connect UPN Matching
Ensuring that on-premises User Principal Names (UPNs) match a verified custom domain in Microsoft Entra ID for seamless synchronization and sign-in.
- On-premises UPNs ending in non-routable suffixes (e.g., .local) should be updated.
- The desired UPN suffix must be added and verified as a custom domain in Microsoft Entra ID.
- Consistency between on-premises and cloud UPNs is crucial for user experience and identity matching.
Memory trick: UPN Prep: Verify, Change, Sync.