AD to Entra ID Migration Readiness Assessment

Migrate from Active Directory to Microsoft Entra ID with a 5-day fixed-fee readiness assessment. Findings report, migration roadmap, and Private Offer for the follow-on engagement. Active Directory has been the identity foundation for most enterprises for two decades. Microsoft Entra ID is where Microsoft is investing forward: passwordless authentication, conditional access, identity protection, Entra Suite, and the agentic identity surface that ships with Microsoft 365 E7. Migrating early consolidates your identity surface and unlocks the next wave of Microsoft security capabilities. Migrating without an assessment leaves you with broken applications, locked-out service accounts, and a help desk that can't authenticate users for days.

Simplicity IT's AD to Entra ID Migration Readiness Assessment is a fixed-fee, 5-day engagement designed for regulated mid-market and enterprise teams that need to know what the migration costs, what it breaks, and what stays before they commit to the work.

What you get Day 1: Forest and domain discovery. Inventory your AD forests, domains, sites, domain controllers, FSMO roles, schema extensions, replication health, and GPO posture. Day 2: Identity inventory. Catalog users, groups, service accounts, computer objects, password policies, and Kerberos / NTLM dependencies. Day 3: Application dependency analysis. Identify every application bound to AD via LDAP, Kerberos, NTLM, RADIUS, or SAML federation. Map each to its corresponding Entra ID. Day 4: Hybrid posture audit. Assess Entra Connect Sync state, AAD Connect Health, hybrid Exchange dependencies, password hash sync, federation, and conditional access readiness. Day 5: Roadmap delivery. Present a phased migration plan, risk register, cost estimate, and a Private Offer for the follow-on migration engagement. Why Simplicity IT Identity-specialist delivery practice. Active Directory, Entra ID, Entra Connect, Defender for Identity, and Entra ID Protection across financial services, healthcare, and the public sector. Fixed fee. Scope and price agreed before kickoff. No hourly billing surprises. Real roadmap, not a sales pitch. The deliverable is a migration plan that your security architect can defend to the audit team. Microsoft-native engineering. No third-party identity bridges, no abandoned-Okta-migration scars. Open-source toolkit + AI-augmented delivery. Our publicly maintained AD readiness toolkit is licensed under the MIT license and wraps Microsoft IdFix, AzureADAssessment, AADInternals, and BloodHound into a single workflow. AI augmentation compresses the Day 1 baseline document from a full day of manual queries to about 30 minutes of architect review. Every deliverable is reviewed by a senior identity architect before customer handoff. Pricing (competitive lead-gen) Up to 250 users, single forest, single domain: starting at $4,995 250 to 1,500 users, multi-domain or hybrid identity: starting at $9,995 1,500+ users, multi-forest, federation, regulated audit: starting at $19,995 Final fee set via Azure Marketplace Private Offer based on forest count, hybrid complexity, and on-site needs. Marketplace starting prices reflect the engagement floor; Enterprise engagements with federation and regulated-audit scope typically land in the $25,000 to $50,000 range. The $9,995 list price is the mid-market reference point. 100% MACC eligible.

Prerequisites Active on-premises Active Directory environment. Microsoft 365 E3, E5, or E7 tenant. Global Administrator access to the Microsoft 365 tenant and Domain Admin or equivalent read access to AD for the engagement window.

Want to self-assess first? Simplicity IT publishes a companion SaaS offer in this same Marketplace catalog: the Simplicity AD Readiness Assessment. The free Sovereignty Score plan grants read-only consent to your tenant and returns a scored snapshot of your AD dependency posture in about 30 minutes. Customers typically run the free SaaS first, then engage the 5-day consulting service when they need a defensible migration plan and architect-led remediation.

Engagement model Remote-first. On-site available for U.S. East Coast engagements at additional cost. Engagement begins within two business weeks of contract signature. Out-of-scope items (full migration execution, AD environment remediation, third-party IdP migration, Microsoft 365 license uplift) priced separately at standard professional-services rates.

Ready to assess? Contact sales@simplicityitinc.com for a scoping call. We’ll confirm fit and lock the engagement window in 30 minutes.