Seems the AD was not synced. Please make sure you meet the Migration Prerequisite:
- Azure Active Directory: AAD is synchronized with on-premise Active Directory environment.
- Compliance (if applicable)
Please exactly follow the guide document to do the migration: TFS-to-VSTS-Migration_WhitePaper.docx
Azure Active Directory
User authentication in Team Foundation Server is handled on-premise by
using Active Directory. With Visual Studio VSTS, users are
authenticated through an Azure Active Directory tenant which works
very similarly to Active Directory on-premise.
Synchronizing identities and groups with Azure AD Connect
By synchronizing your on-premise Active Directory with Azure Active
Directory, your team members will be able to use the same credentials
to authenticate and your VSTS administrators will be able to leverage
your Active Directory groups for setting permissions within your VSTS
account. To setup the synchronization, you will want to use the Azure
AD Connect technology. The documentation for setting up Azure AD
Connect is available at https://aka.ms/AzureADConnect.
Identity Map
The identity map is one of the most important configuration files for
the TFS Database Import service since it is what maps the on-premise
Active Directory identities with a matching Azure Active Directory
identity. This is so that each of your team members will automatically
have their personal settings, security permissions, and history tied
to their Azure Active Directory user account which makes for a
positive experience working in Visual Studio VSTS on the first day.