This is supported using Webex Common Identity (Webex Control Hub) and Cloud Connected UC. Accounts are first synchronized from Azure AD to Webex using the Azure AD Wizard (or any other account creation method - SCIM, Directory Connector, manually, or by API) and from there replicated down to CUCM & CUC with the CCUC Directory service.
It’s important to recognize that this is only a replacement for LDAP synchronization - not authentication! This design assumes that SAML SSO performs the authentication function instead. There are a few use cases where that isn’t possible though; the most notable being MRA-connected video endpoints (Webex Desk series - anything that runs CE / RoomOS). MRA-connected IP Phones are in the same boat if you do not use activation code onboarding (CUCM 12.5+).
