You might see that the Dropbox Community team have been busy working on some major updates to the Community itself! So, here is some info on what’s changed, what’s staying the same and what you can expect from the Dropbox Community overall.
Forum Discussion
I have a question about Azure AD and Dropbox. Can you help?
Hey there,
Has anyone tried connecting Azure AD to Dropbox? Does it provision groups? The instructions only mention about provisioning users https://www.dropbox.com/help/business/microsoft-azure-ad
- Walter
Dropbox Staff
Hey there mxoh - thanks for posting your question here.
While on the setup process, admins can choose if they'd like to sync AD groups to Dropbox. Meaning that those AD groups would be created as Dropbox groups and have the users added to it. The admin can select whether they’d like to use the same AD group (earlier chosen to sync users e.g. "Dropbox") to also sync their groups. An alternative group can be selected to sync groups e.g. "Dropbox-Groups" essentially meaning you manage your users through one group "Dropbox" and your groups through another group "Dropbox-Groups".
Moreover, when the AD connector runs, it checks the configured AD sync group and compares it to Dropbox, then does one of the following group actions:
1. Creates Dropbox group(s) if the group doesn’t exist in Dropbox already
2. Add members to groups, if applicable (only if users are also in their respective group of users that will sync).Additionally, have in mind that changes from Dropbox Business will not sync back to Active Directory. Once created, deleting a group from Active Directory will not delete the corresponding group from Dropbox Business. Instead, all users will be removed from the Dropbox group if either:
1. All members are removed from the sync group in Active Directory
2. The sync group e.g. "Dropbox-Groups" is removed from the Configuration step.I hope this helps clear this up and please let me know if you have any further questions.
Cheers!
Did you ever fiind out how to provision groups in the Azure portal? I have been working on this myself and it turns out when i navigate in the Azure Portal
Active Directory - Enterprise Applications - Dropbox - Provisioning - and scroll down to mapppings
We only see 1 link for provisioning users (and most applicaitons have 2 links )
Provision users
Provision Groups
- Walter
Hey there v-wasmit - sorry to hear that.
Can you first make sure you're following these steps here to do this? To learn more about user provisioning with the AD Connector you can also refer to this page.
Having said that and as I'd really like to help with this, can you elaborate on what exactly is not working for you and maybe provide a screenshot so we can have a visual of this as well?
Let me know what you find please!
mxoh I believe I truly understand your question as I'm in a similar position as I'm also trying to figure some things out with setting up Dropbox for Business with AD.
Although, this question was marked as solved, it doesn't really give the answer as it was probably given to you via direct email. On this post however, everyone that tried to help from Dropbox didn't understand your question. I'm posting this for the benefit of those like me that didn't get that confirmation via a direct email.
I found this article on Microsoft that explains it easily that yes Azure AD does support both users and groups:
The one thing I'm still hung up on is finding out if both AD Connector is needed or just Azure AD, because from everything I've read it seems there is an older way that's not going to be available as mentioned in the article and a new one via Azure AD. So, for the provisioning of users and groups and using SSO it seems Azure AD works for that without using AD Connector.
From what I'm understanding and please correct me if I'm wrong anyone, the AD Connector says it's only used if we wish to sync groups not just users, but yet Azure AD says it can do both...this is where I'm stuck but I will be testing this soon and I'll eventually get my answer if I don't find it online first :-)
