Identity converter
Paste a GUID, an ImmutableId, an Entra SID (S-1-12-1-…) or a hex string. Every other form is worked out for you, which helps with hard matching in hybrid identity and with adding Entra groups to local Administrators through Intune.
Runs entirely in your browser. Nothing you paste is sent anywhere.
How the conversions work
ImmutableId is the base64 of the on-premises objectGUID bytes, in the order .NET's Guid.ToByteArray() gives them (the first three groups are little-endian). Microsoft Entra Connect uses it as the source anchor unless you chose ms-DS-ConsistencyGuid, which normally holds the same value.
Entra SIDs are built from the object ID: the same 16 bytes read as four 32-bit little-endian numbers after S-1-12-1-. You'll see them in local group membership and in Intune policies that add Entra groups to local groups.
LDAP hex is each byte escaped with a backslash, for searches such as (objectGUID=\4a\3e…).