\n
\n
<\/p>\n
<\/p>\n
\n
Azure AD password hash synchronization<\/span>. The simplest way to enable authentication for on-premises directory objects in Azure AD. Users can use the same username and password that they use on-premises without having to deploy any additional infrastructure.\u00a0<\/span><\/p>\n \n <\/p>\n \n Azure AD Pass-through Authentication<\/span>.<\/span> Provides a simple password validation for Azure AD authentication services by using a software agent that runs on one or more on-premises servers. The servers validate the users directly with your on-premises Active Directory, which ensures that the password validation doesn’t happen in the cloud.<\/span><\/p>\n \n \u00a0<\/cite><\/p>\n \n \n \n Here are the two types of identity and their best fit and benefits.<\/p>\n Attribute<\/span><\/p>\n<\/td>\n Cloud-only identity<\/span><\/p>\n<\/td>\n Hybrid identity<\/span><\/p>\n<\/td>\n<\/tr>\n Definition<\/p>\n<\/td>\n User account only exists in the Azure AD tenant for your Microsoft 365 subscription.<\/p>\n<\/td>\n User account exists in AD DS and a copy is also in the Azure AD tenant for your Microsoft 365 subscription. The user account in Azure AD might also include a hashed version of the already hashed AD DS user account password.<\/p>\n \n<\/td>\n<\/tr>\n How Microsoft 365 authenticates user credentials<\/p>\n<\/td>\n The Azure AD tenant for your Microsoft 365 subscription performs the authentication with the cloud identity account.<\/p>\n<\/td>\n The Azure AD tenant for your Microsoft 365 subscription either handles the authentication process or redirects the user to another identity provider.<\/p>\n<\/td>\n<\/tr>\n Best for<\/p>\n<\/td>\n Organizations that do not have or need an on-premises AD DS.<\/p>\n<\/td>\n Organizations using AD DS or another identity provider.<\/p>\n<\/td>\n<\/tr>\n Greatest benefit<\/p>\n<\/td>\n Simple to use. No extra directory tools or servers required.<\/p>\n<\/td>\n Users can use the same credentials when accessing on-premises or cloud-based resources.<\/p>\n<\/td>\n<\/tr>\n<\/tbody>\n<\/table>\n<\/div>\n \nPlanning out the Identity and Authentication Solutions<\/h1>\n
\n\n
\n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n \n