Skip to content

Commit 0d56b8f

Browse files
authored
Merge pull request #188135 from RobdeJong/patch-131
Update plan-connect-topologies.md
2 parents b48d829 + a1a936c commit 0d56b8f

File tree

1 file changed

+1
-3
lines changed

1 file changed

+1
-3
lines changed

articles/active-directory/hybrid/plan-connect-topologies.md

Lines changed: 1 addition & 3 deletions
Original file line numberDiff line numberDiff line change
@@ -151,13 +151,11 @@ This topology implements the following use cases:
151151
* It is supported to have different sync scopes and different sync rules for different tenants.
152152
* Only one Azure AD tenant sync can be configured to write back to Active Directory for the same object. This includes device and group writeback as well as Hybrid Exchange configurations – these features can only be configured in one tenant. The only exception here is Password Writeback – see below.
153153
* It is supported to configure Password Hash Sync from Active Directory to multiple Azure AD tenants for the same user object. If Password Hash Sync is enabled for a tenant, then Password Writeback may be enabled as well, and this can be done on multiple tenants: if the password is changed on one tenant, then password writeback will update it in Active Directory, and Password Hash Sync will update the password in the other tenants.
154-
* It is not supported to add and verify the same custom domain name in more than one Azure AD tenant, with one exception: it is supported to [add and verify](../fundamentals/add-custom-domain.md) a custom domain name in a tenant in the Azure Commercial environment and subsequently add and verify that same domain name in a tenant in the Azure Government environment. Note that the custom domain name **MUST** exist in Commercial Azure AD tenant before it can be verified in the Azure Government Azure AD tenant.
154+
* It is not supported to add and verify the same custom domain name in more than one Azure AD tenant, even if these tenants are in different Azure environments.
155155
* It is not supported to configure hybrid experiences such as Seamless SSO and Hybrid Azure AD Join on more than one tenant. Doing so would overwrite the configuration of the other tenant and would make it unusable.
156156
* You can synchronize device objects to more than one tenant but only one tenant can be configured to trust a device.
157157
* Each Azure AD Connect instance should be running on a domain-joined machine.
158158

159-
Related information : [Federate multiple instances of Azure AD with single instance of AD FS](./how-to-connect-fed-single-adfs-multitenant-federation.md)
160-
161159
>[!NOTE]
162160
>Global Address List Synchronization (GalSync) is not done automatically in this topology and requires an additional custom MIM implementation to ensure each tenant has a complete Global Address List (GAL) in Exchange Online and Skype for Business Online.
163161

0 commit comments

Comments
 (0)