How can we get the same AD on-Prem Utility capabilities when using fully Azure AD?

[Malek Affes]

I would like to ask about an issue we are strugguling a bit with it:

We are aiming to put EOF for Microsoft AD soon and use fully Azure AD. part of this project is to migrate the utitlity provided by Opsgenie https://support.atlassian.com/opsgenie/docs/integrate-opsgenie-with-microsoft-active-directory/
And use a new one to intergate Opsgenie with Azure AD. Atlassian-Opsgenie doesn't provide the equivalent utility or guidelines to migrate certain capabilities that the utility used to offer. 

The way how we work with the utility today is the following:

- A new team to add to Opsgenie:
* Add Team in AD by creating a group
* Add two users to that group in AD

* the utility run twice a day and will add a new team in opegenie a create membership for the two users.

* we will add other team members the same way (add in AD group and then the utility add membership in Opsgenie)

- Deleting a user:

* User disabled in AD

* Utility will apply deletion in Opsgenie for disabled or deleted users in AD 

Did anyone have an idea how can migrate from this utility keeping the same capabilities?

[Skyler Ataide]

Hi Malek, 

Thanks for posting this question to the community! Unfortunately, the short answer here is that there isn't currently a built-in functionality between Opsgenie and Azure Active Directory that allows for automatic team provisioning based on AD groups and automatic user de-provisioning when a user is removed from Azure AD. Atlassian Access is one solution that allows for automatic user de-provisioning, but as far as for assigning team membership, this would need to be done either via the teams API or manually in Opsgenie. It will be valuable for us to know if there are other organizations looking for this type of functionality between Opsgenie and Azure Active Directory. If you would like, I can raise a public feature request where we can also track feedback on adding this functionality.