How to use SMTP matching to match on-premises user accounts to Office 365 user accounts for directory synchronization

Article translations Article translations
Article ID: 2641663 - View products that this article applies to.

Not sure what release of Office 365 you're using? Go to the following Microsoft website:
Am I using Office 365 after the service upgrade?
Expand all | Collapse all

On This Page

INTRODUCTION

In some scenarios, you may have to transfer the source of authority for a user account when that account was originally authored by using Office 365 management tools. These tools include the Office 365 portal, Windows Azure Active Directory Module for Windows PowerShell, and so on. You can transfer the source of authority so that the account can be managed through an on-premises Active Directory Domain Services (AD DS) user account by using directory synchronization.

This article discusses how this transfer of the source of authority is affected by "SMTP matching," a process that uses the primary Simple Mail Transfer Protocol (SMTP) address to match the on-premises user account to the Office 365 user account.

MORE INFORMATION

SMTP matching limitations

The SMTP matching process has the following technical limitations:
  • SMTP matching can be run only on user accounts that have a Microsoft Exchange Online email address.

    Note This doesn't mean the user must be licensed for Exchange Online. This means that a mailbox that has a primary email address must exist in Exchange Online for SMTP matching to work correctly. 
  • SMTP matching can be used only one time for user accounts that were originally authored by using Office 365 management tools. After that, the Office 365 user account is bound to the on-premises user by an immutable identity value instead of a primary SMTP address. 
  • The cloud user’s primary SMTP address can't be updated during the SMTP matching process because the primary SMTP address is the value that is used to link the on-premises user to the cloud user. 

How to use SMTP matching to match an on-premises user to a cloud identity

To use SMTP matching to match an on-premises user to an Office 365 user account for directory synchronization, follow these steps:
  1.  Obtain the primary SMTP address of the target Office 365 user account. To do this, follow these steps:
    1. Sign in to the Office 365 portal as a global admin.
    2. Do one of the following:
      • In Office 365, click Admin, and then click Exchange. to open Exchange Admin Center.
      • In Office 365 pre-upgrade, click Admin, and then under Exchange Online, click Manage to open Exchange Control Panel.
    3. In the Exchange Admin Center or Exchange Control Panel, locate the user account that you want, and then double-click it.
    4. Click Email address or expand  Email Options, and then note the primary SMTP address of the user account.
  2. Start Active Directory Users and Computers, and then create a user account in the on-premises domain that matches the target Office 365 user account. For more information about how to do this, go to the following Microsoft TechNet website:
    Create a User Account in Active Directory Users and Computers
  3. Set the primary SMTP address of the new user account to match the primary SMTP address that you noted in step 1D.

    To do this by using Exchange Management tools, go to the following Microsoft websites:
    If Exchange isn't installed on-premises, you can manage the SMTP address value by using Active Directory Users and Computers:
    1. Right-click the user object, and then click Properties.
    2. On the general tab, update the E-mail field, and then click OK.
  4. Force directory synchronization. For more information about how to do this, go to the following Microsoft website:
    Force directory synchronization
For more information about how to transfer the source of authority between on-premises directory synchronization and cloud-based management tools such as the Office 365 portal and Windows Azure Active Directory Module for Windows PowerShell, go to the following Microsoft website:
Directory synchronization and source of authority

Still need help? Go to the Office 365 Community website.

Properties

Article ID: 2641663 - Last Review: May 31, 2013 - Revision: 15.0
Applies to
  • Microsoft Office 365 for enterprises (pre-upgrade)
  • Microsoft Office 365 for education  (pre-upgrade)
  • Microsoft Exchange Online
  • Windows Azure Active Directory
Keywords: 
o365 o365a o365e o365062011 pre-upgrade o365062013 after upgrade o365m KB2641663

Give Feedback

 

Contact us for more help

Contact us for more help
Connect with Answer Desk for expert help.
Get more support from smallbusiness.support.microsoft.com