Entra ID

As described here we are pleased to announce the new synchronization function in D365 version 2.9. We completely rebuilt the sync process and added rules for automatic user assignment to specific OU´s. Why Sync? Since D365 needs to deal with (ten)thousands of users in an AAD D365 uses an cache layer to deliver a good user experience and performance. So changes which are made outside of D365 - like in the Office 365 portal, via PowerShell or another App – may not be visible immediately in D365. ...

In the coming week there will be the next update of Delegate rolled out. This will be Delegate version 2.9 which includes these updates: New Synchronization: We improved the sync processes (for domains, security groups, distribution lists and user and licenses) which now are combined in one simple step. The user import now can be configured with rules for putting users in specific OU´s depending on special properties (country, security groups, AAD properties…) ...

In Delegate365 version 2.8 there´s a new setup wizard included (as announced here). With this function companies no longer need to create a (temporary) administrator user for doing the setup process of Delegate365 but instead can setup their Azure Active Directory on their own for working with Delegate365. Prerequisites To configure your real company AAD with Delegate365 you get two access information by atwork: The Setup-URL (which usually goes like https://[yourcompany].azurewebsites.net/setup) and a configuration password (which is in fact a code) to give you the access for the setup process. This code is important and valid for this specific Delegate365 appliance. With that code you can setup the service accounts till the code is changed. More about that later. ...

Next week there will Delegate version 2.8 rolled out to all appliances. There will be new features included: Setup-Wizard: There´s a new setup wizard included, so that each customer can do the configuration (and renewal of the service account) of his D365 version on his own. New Synchronization: moved to version 2.9 (updated) More to come in the next version(s)… BTW: We added the update date information and bullets in the style sheet (which was missing) in the changelog on https://delegate365.com/changelog. ...

In Delegate365 version 2.7 there were some minor fixes rolled out. Style Sheets and client messages were updated. The user import with an CSV file had a problem with updating the new imported users in the users list. Since D365 uses a cache layer for user objects to improve performance since version 2.3 the new users didn´t show up immediately after the file import but after the automatic sync task (which runs in the background in a predefined time frame). With this fix the new importet users now show up immediately in the users list. ...

Ich bin vor kurzem auf ein interessantes Problem gestoßen. Das wäre sicher auch jedem aufgefallen, wenn man mal drüber nachdenkt. :) Ein Kunde wechselt im Zuge eines Serverwechsels von ADFS 2.0 auf ADFS 3.0. Das heißt in diesem Zusammenhang einfach nur, der ADFS Server wurde auf Windows Server 2012 R2 aktualisiert und der Web Application Proxy davor ebenfalls. Jetzt ist es nur leider so, dass seitdem - der ADFS Service hat zuvor beim Authentifizieren von Außen über den WAP problemlos funktioniert – von Intern der ADFS Service nicht mehr erreichbar ist. Der Internet Explorer liefert die Meldung “Die Webseite kann nicht angezeigt werden”. ...

Delegate365 changelog version 2.6. We internally changed the encryption of stored credentials and extended it to protect all custom values. D365 uses an own Service Account for accessing and transferring user data to Azure Active Directory. For Exchange functionality like Alias email addresses or distribution lists as well as reporting data D365 needs additional credentials. These essential data must be stored in a secure way. To ensure safety in D365 we changed the encryption and extended it to all properties stored in the D365 database with version 2.6. Now all custom config values (even fields like company name, address, phone number, etc.) are encrypted with an Advanced Encryption Standard (AES) algorithm. ...

Gerade in großen Umgebungen gibt es neben einigen Firewalls sehr oft natürlich auch HTTP / HTTPS Proxy Server die zur Sicherheit den Verkehr von Clients nach extern überprüfen sollen. Gerade wenn sie Dirsync im Einsatz haben kann das häufig zu Konfigurationsproblemen führen und führt zu einigen Verwirrungen. Das Problem? Ihr Dirsync Server steht im internen LAN und muss aber für die Synchronisation mit dem Azure Active Directory mit dem Internet kommunizieren. Der Firewall Mensch sagt aber “nein - verwendet den Proxy”. ...

Für alle die aktuell versuchen einen Exchange 2013 Hybrid Wizard auszuführen. Leider gibt es seit kurzem einen kleinen Bug der dafür sorgt das dies aktuell nicht möglich ist. Die Fehlermeldung zeigt eine SerializationException und beginnt ungefähr: Updating hybrid configuration failed with error ‎’Subtask CheckPrereqs execution failed: Check Tenant Prerequisites Deserialization fails due to one SerializationException: Microsoft.Exchange.Compliance.Serialization.Formatters.BlockedTypeException: The type to be ‎(de)‎serialized is not allowed: Der dazupassende KB Artikel ist seit kurzem Online und lässt aktuell noch keine genauen Informationen los. Man muss für eine Lösung auch leider den Support bemühen. ...

Delegate365 changelog version 2.5. There´s a new feature concerning distribution lists built in. We got the request that it would be useful to integrate existing distribution lists into other distribution lists (DL) in D365, so that all members of a DL automatically receive emails if their DL is member of one or more other DL(´s). So now in D365 v2.5 it is possible to put existing DL´s as member into another DL. This feature is handy and reduces potential synchronization steps and eases the organizational tasks for the admins. ...