How do I disable connect sync from the azure side because the on-prem AD structure is no longer available

Hello ron,

It sounds like you want to disable Azure AD Connect sync since your on-premises Active Directory structure is no longer available. Here’s how you can do that:

Option A: Disable using Microsoft Entra Connect

1. Run Microsoft Entra Connect and go to the Change user sign-in page.
2. Deselect the Enable single sign-on option and proceed through the wizard.
3. After completing the wizard, Seamless SSO will be disabled. Keep in mind that there may be additional manual steps needed for clean-up.

Option B: Disable using PowerShell (if you don’t have access to the on-prem AD)

1. Download and install the Azure AD PowerShell.
2. Navigate to the $env:ProgramFiles\Microsoft Azure Active Directory Connect folder.
3. Import the Seamless SSO PowerShell module:

Import-Module .\AzureADSSO.psd1

1. Run PowerShell as an Administrator and enter:

New-AzureADSSOAuthenticationContext

1. When prompted, use your tenant's Global Administrator credentials.
2. Disable SSO with:

Enable-AzureADSSO -Enable $false

1. If you want to completely remove any associated domains, use:

Disable-AzureADSSOForest -DomainFqdn <fqdn>

If you have any additional questions, or if you're facing any specific issues during this process, let me know!

Follow-Up Questions:

1. Do you currently have access to a machine where you can run Microsoft Entra Connect?
2. Are you able to run PowerShell commands, or do you need assistance with that?
3. Have you done any sync configurations previously that you need to preserve or consider?

References:

• Disable Seamless Single Sign-On
• Azure AD PowerShell Overview