When passwords are changed or reset on-premises, the new password hashes are synchronized to Azure AD immediately so that your users can always use the same password for cloud resources and on-premises resources. With password hash synchronization, hashes of user passwords are synchronized from on-premises Active Directory to Azure AD. Federated authentication - When you choose this authentication method Azure AD will hand off the authentication process to a separate trusted authentication system, such as AD FS or a third-party federation system, to validate the user's sign-in.įor most organizations that just want to enable user sign-in to Microsoft 365, SaaS applications, and other Azure AD-based resources, we recommend the default password hash synchronization option.įor detailed information on choosing an authentication method, see Choose the right authentication method for your Azure Active Directory hybrid identity solution Password hash synchronization.Pass-through authentication (PTA) - This option is similar to password hash sync, but provides a simple password validation using on-premises software agents for organizations with strong security and compliance policies.Password hash synchronization (PHS) - Password Hash Sync enables users to use the same username and password that they use on-premises without having to deploy any additional infrastructure besides Azure AD Connect.

With cloud authentication you can choose from two options: Cloud Authentication - When you choose this authentication method Azure AD handles the authentication process for user's sign-in.These factors are different for every organization and might change over time.Īzure AD supports the following authentication methods: To choose the right authentication method, you need to consider the time, existing infrastructure, complexity, and cost of implementing your choice. Authentication is critical, because it will validate user's identities to access apps and data in the cloud. It's important to make sure you choose the right method that meets your organization's security and advanced requirements. The first decision of implementing Azure AD Connect is choosing which authentication method your users will use to sign in. Choosing the user sign-in method for your organization With this trust federated domain users will have access to Azure AD cloud resources within the tenant. It is important to remember that by configuring federation for Azure AD, you establish trust between your Azure AD tenant and your federated domains.

1password web login