Implementing Azure AD hybrid identity
Maintaining multiple independent silos of user credentials carries with it an increased risk of a data breach. How many times have we heard of security breaches that happened as a result of ex-employees having unrevoked access to sensitive systems after leaving their former organization? The access should have been disabled but because the victim organization had many independent access control systems, it was missed. One solution to this is to establish a centralized identity system where the provisioning and de-provisioning of user identities happen in one place. This way, if a user leaves an organization, the user account only needs to be disabled once in the central system! This is exactly what Azure AD Connect can help organizations that already have an on-premises AD DS solution to achieve as they adopt Azure AD.
Azure AD Connect
So, what is Azure AD Connect? It is a tool that can be used to synchronize objects such as user accounts...