Softwise\Checkcity Support

https://learn.microsoft.com/en-us/entra/identity/hybrid/cloud-sync/what-is-cloud-sync

https://setup.cloud.microsoft/entra/add-or-sync-users-to-microsoft-entra-id

To check sync errors:   https://admin.microsoft.com/Adminportal/Home#/dirsyncobjecterrors

- AD Sync is old stuff and we dont use that anymore.  instead, use Entra Cloud Sync.  This new software supports syncing from multiple disconnected forests (like softwise.co and checkcity.local) and also supports HA configurations.  (To setup HA just perform steps 1-4 on additional domain controllers in the same domain.)

1. Download the agent to install on the server
   1. https://portal.azure.com/#view/Microsoft_AAD_Connect_Provisioning/CloudSyncMenuBlade/~/Agents
2. Install the agent
3. Configure the agent:
   1. Click “Next”
      1. Then select the extension to sync to “Microsoft Entra Cloud Sync”
         1. 
      2. Authenticate to Azure (this account needs to be a global admin)
         1. 
      3. Create gMSA.   (If you have already created one then this option will search for, find, and re-use the existing gMSA.)
         1. 
      4. Your domain should already be listed and authenticated.  Click “Next”
      5. Verify the information and click “Confirm”
4. Configure Azure if this is a new domain that is getting synced. (If this is a new agent for an existing domain then you are done – no further steps are needed.)
5. If this is a newly synced domain then you will need to create 2 new configurations in the Cloud sync azure portal. (one from AD, and one to AD)
   1. Go to:  https://portal.azure.com/#view/Microsoft_AAD_Connect_Provisioning/CloudSyncMenuBlade/~/CloudSyncConfigurations
   2. Click “New Configuration”, then click “AD to Microsoft Entra ID sync”
      1. Select the new domain from the dropdown list and then click “Create”
      2. Click “Review and enable”
         1. 
      3. Click “Enable configuration”
   3. Click “New Configuration”, then click “Microsoft Entra ID to AD sync”
      1. Select the new domain from the dropdown list and then click “Create”
      2. Click “Review and enable”
      3. Click “Enable configuration”
   4. You should now see the new domain’s 2 syncs with green checkmarks next to them
      1.