Moving users, groups, policies and servers into FreeIPA from LDAP directories, other FreeIPA deployments and non-RHEL installations.
Moving users and groups from OpenLDAP or Red Hat Directory Server into FreeIPA: migrate-ds options, ignored attributes and object classes, user private groups, testing on a copy, and what has to move by hand.
Getting migrated users working without forced resets: password migration mode, SSSD generating Kerberos keys at first login, the migration web page, and users whose hashes cannot be migrated.
Consolidating or rebuilding FreeIPA realms with ipa-migrate: production versus staging mode, what moves and what does not, manual follow-ups, client re-enrollment and password resets.
Replacing FreeIPA servers on CentOS, AlmaLinux or Fedora with RHEL IdM servers through replicas, why in-place conversion is not supported, and the support implications.
Moving sudo rules and access policies that migrate-ds does not carry: exporting LDIF, mapping to FreeIPA sudo and HBAC rules, testing with hbactest, and cutover per host group.
Tell us what you're working on, whether it's a deployment, an audit, a security test or a cyber range. You'll speak with an engineer who can help you scope it.