Tips for a cutover migration to Office 365 with ADFS and Single Sign-on
Here are some of my tips for a cutover migration to Office 365 with ADFS and Single Sign-on
- My primary smtp on Exchange 2010 still had a reference to skillsinc.local (along with skillsinc.com) after I changed all the UPNs from .local to .com and that was messing things up. When I looked in Office 365 none of my migrated mailboxes had .onmicrosoft.com aliases! Without that Federation will not work. I used ADMODIFY from Codeplex to remove all reference to skillsinc.local from my local AD. This blog does a great job detailing how to do that: http://seanofarrelll.blogspot.com/2012/07/how-to-federate-existing-office365.html Then I wrote a powershell script that added the .onmicrosoft.com alias to all the inboxes using Set-MsolUserPrincipalName to fix this problem. I will post that in another blog post.
- Make sure you are running your powershell commands and scripts in the correct window! Some run on your local exchange shell and some in the Office 365 shell (Microsoft Online Services Powershell module). Exchange2007MBtoMEU.ps1 must be run from your local exchange server shell to make the changes to your local Active Directory.
- Make sure you open the scripts and know what they are doing! If you get errors, stop everything and figure out what went wrong. Did you run it from the wrong shell? Is there something wrong with the .onmicrosoft.com alias or the primary smtp in AD? Look at the output in cloud.csv and see if any information is missing. Mine was missing the CloudEmailAddress because the .onmicrosoft.com alias was missing from all my cloud mailboxes. (See bullet point 1)