How to transition from Active Directory (AD) integration to Azure Active Directory (AAD) for the UiPath Orchestrator. It is crucial to ensure that the email address/UPN in AAD matches the samAccountName@domain from AD for the users to switch from AD to AAD seamlessly. If this is not feasible or does not work, the alternative is to remove the old AD users and import them from AAD once more. This import can be performed directly or through a group.
Prerequisites:
- Ensure the access to both AD and AAD (with sufficient rights/permissions)
- Verify that the email address/UPN in AAD corresponds to the samAccountName@domain from the AD for each user
- Make sure that the AAD configuration was properly done
Steps to Transition: Follow these steps to transition from AD integration to AAD for UiPath Orchestrator,
- Log in to UiPath Orchestrator using an AAD user:
- To query users/groups from AAD, first log in as an AAD user because the required permissions are determined by the logged-in user's permissions
- If necessary, create a local user in the Orchestrator that has an email address matching the AAD user
- Verify that the users' email address/UPN from AAD matches the samAccountName@domain from AD
- If the information matches, the users should be changed from AD to AAD automatically on login
- If the information does not match, proceed to step 3
- Delete old AD users
- Remove the users who were previously connected to the AD integration
- Import users from AAD
- Import the users individually or through a group
- If using the group method, note that users will need to log in to be created.
Troubleshooting
- If the transition does not work correctly, ensure that all prerequisites were met. Double-check that the email addresses/UPNs in AAD match the samAccountNames@domain from AD
- If importing users fails, make sure to log in with an AAD user with the appropriate permissions to query data from AAD.