Selecting a hybrid identity authentication method
When implementing Azure AD Connect using custom settings, we have the option to choose the authentication method that we want to use. There are three options that are available:
- Password Hash Synchronization (PHS)
- Federation
- Pass-Through Authentication (PTA)
PHS is one of the authentication methods that we can implement when we configure hybrid identity using Azure AD Connect. It is the default option. So, how do we implement this authentication method?
- First, we install Azure AD Connect on-premises. This creates a secure outbound connection between on-premises AD DS and Azure AD.
- We select the PHS option and configure the scope of synchronization that identifies the boundary of the objects that we want Azure AD Connect to synchronize to Azure AD.
- Azure AD Connect synchronizes the user objects, attributes, and password hashes from an on-premises AD DS instance to Azure AD:
Important Note
Passwords...
