I'm trying to move from using FIM with a third-party ECMA2 O365 MA to AADSync. We have about 55k users, so I want to minimise the number of O365 accounts that get changed when we do the move, to reduce the service down time. The FIM MA only synced a small number of attributes, so I've configured AADSync to do the same. I turned off the scheduled task for synchronisation and ran Full Imports on both MAs followed by Delta Syncs, so I could see what changes AADSync wanted to make.
The joins all work OK, but it wants to change every O365 account. The changes listed are to add alias, displayName, mail, proxyAddresses and userPrincipalName. This is odd, because all our O365 accounts already have those set. I did a Delta Import a bit later so I could check what attributes were coming into the O365 Connector Space. All the ones I just mentioned are missing on new objects. Is this normal? I notice that no SRE rules import them, but then nor do they import givenName or surname, and they are present.
Can anyone explain what's going on?
Thanks
Max