Problem: Connection fails when activating SSO for Office 365 the Powershell script

[scheinig]

Problem:

The downloaded Powershell script from the wizard shows an error.

Investigation:

You should have two domains in your azure account within ‘Azure Active Directory’ → ‘Custom Domain Names’. The automaticly generated ‘…onmicrosoft.com’ and an other external DNS domain. Both need to verifyed.
The external DNS domain must then be specified in the wizard.

Explanation:

These .onmicrosoft.com domains only work within Azure. For Single Sign-On from an external Identity Provider an external, verified domain is mandatory.
The scenario supported by the connector: UCS users are synchronized into the Azure Active Directory, but the user password is not transmitted so the password does not leave the UCS domain. The authentication of the user then takes place via SSO at the UCS domain. This central part cannot be reconfigured, the synchronization of password hashes is not supported.

Solution:

How you can verify the external Domain is described here:

Hinzufügen Ihrer benutzerdefinierten Domäne – Azure Active Directory

Note: if you already have users in Azure

The Office365 Connector works in such a way that users created in UCS are synchronized to Azure. At the moment there are no plans to connect to existing users. How to connect manually is described here:

UCS Office365 issue

I already have some users in my office 365 before setting up UCS AD with their own passwords. Then I added UCS server with the usernames same as in office365 with their corresponding email ids but I could see that in users office 365 tab, I could not see their email ids and also can’t login to that ones using SSO. The newly created accounts with the new emails in UCS are being created in office365, but what about the existing old ones.