Overview

This guide walks you through deploying AOH Sync in your Azure subscription and completing the initial configuration. Follow the steps in order — each step builds on the last. The full path from prerequisites to your first sync takes approximately 45–60 minutes.

What you'll need

Requirement	Details
Azure subscription	With the ability to deploy a VM from the Azure Marketplace and create resources in a resource group
A domain you control	For example, sync.yourcompany.com. You need the ability to add an A record with your DNS provider
AOH Sync license key	Provided when you purchase AOH Sync. Format: CS-XXXXX-XXXXX-XXXXX-XXXXX-XXXXX

1

Prerequisites

Confirm you have an active Azure subscription, an AOH Sync license key, and a domain you control before you begin.

2

Step 1 — App Registration

Create an Azure App Registration, grant the required Microsoft Graph permissions, and generate a client secret. AOH Sync uses this registration to authenticate your users via Entra ID. (~5 minutes)

3

Step 2 — Azure Marketplace

Find AOH Sync in the Azure Marketplace, configure your deployment, and provision your VM. (~2–3 minutes provisioning)

4

Step 3 — DNS

Add an A record pointing your chosen domain to the VM's public IP address. AOH Sync configures TLS automatically once the domain resolves. (A few minutes to propagate)

5

Step 4 — First Login

Open the browser setup wizard at https://<your-domain>/onboard, enter your Azure AD credentials, and start the install. (~10–15 minutes)

6

Step 5 — Redirect URI

Return to your App Registration and add the OAuth redirect URI for your domain. This is the final configuration step before AOH Sync is live.

7

Step 6 — Connect a Source System

Connect the HR or identity system AOH Sync reads people from. Adding it automatically creates an Account Import connector. (~5 minutes)

8

Step 7 — Connect a Target System

Connect your Microsoft Entra ID or Active Directory tenant. Adding it automatically creates an Identity Ingestion connector. (~10 minutes)

9

Step 8 — Set Up Provisioning

Create the Outbound Provisioning connector that writes identities out to your target directory. (~5 minutes)

10

Step 9 — Run Your First Sync

Confirm field mappings, trigger a sync, and verify the results in Sync History and the Dashboard.

Managing your instance

Once AOH Sync is deployed, see Managing Your Instance for information on checking status, viewing logs, applying updates, and monitoring your instance.

Need help?

Contact support at [e-mail] or visit the AOH Sync support page.