Microsoft Entra ID

Group Source Of Authority Configure

31 August 2026Doc update+2 / −2 lines

In brief

The documentation now points administrators to the Microsoft Entra Cloud Sync tutorial for provisioning groups to Active Directory Domain Services, replacing the previous provisioning overview and on-premises app governance links.

What Entra admins need to know

Administrators should use the updated group provisioning tutorial when configuring or learning about this scenario.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

View full page diff

View on Microsoft Learn

The comparison below shows only the changed extract. Use the full-page view for complete context.

Convert the Source of Authority (SOA) when ready.
Use custom expressions to ensure Cloud Sync provisions groups back to AD DS with the same CN and OU values.

For more information, see ~~How provisioning from Microsoft Entra ID to Active Directory works~~Provision groups to Active Directory Domain Services by using Microsoft Entra Cloud Sync.

Convert SOA for a test group

Related content

@@ -74,7 +74,7 @@ If you want to provision the group back to AD DS, plan to complete the following 1. Convert the Source of Authority (SOA) when ready.  1. Use custom expressions to ensure Cloud Sync provisions groups back to AD DS with the same CN and OU values.  -For more information, see [How provisioning from Microsoft Entra ID to Active Directory works](cloud-sync/how-provisioning-to-active-directory-works.md).+For more information, see [Provision groups to Active Directory Domain Services by using Microsoft Entra Cloud Sync](cloud-sync/tutorial-group-provisioning.md).  ## Convert SOA for a test group @@ -565,5 +565,5 @@ To scope a group for Source of Authority operations within an Administrative Uni ## Related content  - [Group SOA overview](concept-source-of-authority-overview.md)-- [Tutorial: Govern access to an on-premises app from Microsoft Entra ID](/entra/identity/hybrid/cloud-sync/tutorial-users-groups-provisioning-walkthrough)+- [Provision groups to Active Directory Domain Services by using Microsoft Entra Cloud Sync](/entra/identity/hybrid/cloud-sync/tutorial-group-provisioning) - [onPremisesSyncBehavior Microsoft Graph API](/graph/api/resources/onpremisessyncbehavior)