Hi David,

Laserfiche Directory Server has a feature called Linked Providers that enables linking SAML logins (from Azure AD) to Windows AD users.

Ask the customer if:

1. They're migrating their AD Domain Controllers (DCs) to Azure as well
2. They're planning on using "hybrid identity with Azure Active Directory" going forward

If the answer to both of those is Yes, you almost certainly want to set up Azure AD SAML as a Linked Provider rather than migrating the user accounts (which is a complicated process).

See:

• https://learn.microsoft.com/en-us/azure/active-directory/hybrid/whatis-hybrid-identity
• https://learn.microsoft.com/en-us/azure/active-directory/cloud-sync/what-is-cloud-sync 
• https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-whatis