How to Integrate On-premise Authentication System into Cloud Services: Single Sign-on for Office365

Kyoto Institute of Technology has 444 faculty and 3,943 students. We began using Microsoft Office365 in April 2018. The authentication for Microsoft Office365 is accomplished using Azure Active Directory. We synchronized between on-premise Active Directory and Azure Active Directory the users who are permitted to use Microsoft Office365. In addition, we enabled authentication by single sign-on using SAML. Using this structure, the user experience and security improved through the centralization of login information. In this paper, we will describe the detail of user synchronization between on-premise Active Directory and Azure Active Directory at our university and details of the authentication cooperation for Cloud Service.