Forum Discussion

Deleted's avatar
Deleted
May 16, 2018

Office 365 Migration of Service accounts

We are in the process of migrating our users to Office 365, and we are getting down to the point were we will migrate service accounts. Some of these service accounts have access permissions to other mailboxes to do custom tasks. I am having a hard time wrapping my head around how these service accounts will authenticate in a post migrated world. 

 

We have federated accounts, so we cant just open our application and change the email address username and password in the app can we? I may be wrong though since the app is on prem it may still auth to AD somehow?

 

Options Ithought of: 

Do we have to mail remove their properties on premises and create cloud only mail accounts and reassign permissions then reconfigure our applications?

 

Add a new UPN, Put the service account in a non federated domain then update the application with the new username?

 

Any other options out there people can think of?

  • Mitch King's avatar
    Mitch King
    Iron Contributor

    It depends what the app is and what it is trying to do...

     

    application impersonation?

    send SMTP?

    Use MAPI to open and read/write to a mailbox?

    • Deleted's avatar
      Deleted

      Most are just sending SMTP mail. 

      • Mitch King's avatar
        Mitch King
        Iron Contributor

        In that case why not just use the hybrid exchange server (on-premises) as a relay, you only need to migrate the users that will consume the Exchange Online service.

Resources