How to associate newly creating CSP subscriptions to customer's Azure active directory

[VinayakB1]

We are currently executing lift and shift migration of customer's applications from on-premise data center to Azure. And for that, we need to create new subscriptions in CSP and want to associate those newly creating subscriptions to customer's Azure Active directly which we want to leverage for migrated applications to authenticate and authorize.

Would appreciate if someone can share detailed steps and guideline to acheive this.

[JanoschUlmer]

Hi @VinayakB1 :

You send the customer the reseller relationship invite as CSP: Request a relationship with a customer - Partner Center | Microsoft Docs,

let the customer's global admin accept it and then you can provision Azure subscriptions into their existing Azure AD tenant. 

[VinayakB1]

If the customer's global admin accepts the reseller relationship invite, does it mean that customer's Azure active directory (for example xyz.com) is extended or associated to CSP? Then further newly created subscriptions in CSP and resources inside it can use customer's Azure active directory (xyz.com) for any identity, authentication and authorization? And any application lift and shifted from on-premise to Azure CSP can also use customer's Azure active directory xyz.com?

Is there no need of federation or trust from CSP to customer's Azure active directory?

[JanoschUlmer]

It is associated to the CSP, this link enables the CSP to provision licenses in to the customer AzureAD tenant - you could consider this to be a kind of trust relationship from customer tenant to Partner tenant.

So yes to all your questions.

[VinayakB1]

Thank you Janosch