In the Exchange admin center, locate and then double-click the user account that you want.Ĭlick email address, and then note the primary SMTP address of the user account. Sign in to the Office 365 portal as a global admin.Ĭlick Admin, and then click Exchange to open the Exchange admin center. Obtain the primary SMTP address of the target Office 365 user account. To use SMTP matching to match an on-premises user to an Office 365 user account for directory synchronization, follow these steps:
How to use SMTP matching to match an on-premises user to a cloud identity
Unable to update this object because the following attributes associated with this object have values that may already be associated with another object in your local directory services: [ProxyAddresses Correct or remove the duplicate values in your local directory. Otherwise, the sync will fail and you may receive an error message that resembles the following: Make sure that no two users have the same SMTP address. SMTP addresses are considered unique values. The cloud user’s primary SMTP address can't be updated during the SMTP matching process because the primary SMTP address is the value that is used to link the on-premises user to the cloud user. After that, the Office 365 user account is bound to the on-premises user by an immutable identity value instead of a primary SMTP address.
SMTP matching can be used only one time for user accounts that were originally authored by using Office 365 management tools. This means that a mailbox that has a primary email address must exist in Exchange Online for SMTP matching to work correctly. Note This doesn't mean the user must be licensed for Exchange Online. For detailed information, refer to the "Hard-match vs Soft-match" section of the following Microsoft Azure article:Īzure AD Connect: When you have an existent tenant SMTP matching can be run on user accounts that have a Microsoft Exchange Online email address. For mail-enabled groups and contacts, SMTP matching (Soft match) is supported based on proxy addresses. The SMTP matching process has the following technical limitations: MORE INFORMATION SMTP matching limitations
This article discusses how this transfer of the source of authority is affected by "SMTP matching," a process that uses the primary Simple Mail Transfer Protocol (SMTP) address to match the on-premises user account to the Office 365 user account. You can transfer the source of authority so that the account can be managed through an on-premises Active Directory Domain Services (AD DS) user account by using directory synchronization.
These tools include the Office 365 portal, Microsoft Azure Active Directory Module for Windows PowerShell, and so on.
In some scenarios, you may have to transfer the source of authority for a user account when that account was originally authored by using Office 365 management tools. Office Products Azure Active Directory Office 365 Identity Management Exchange Online More.