If you need to have on-premise managed Multi-Factor Authentication (MFA), you'll need to use Active Directory Federated Services (ADFS). This path is for organizations wanting to enforce their on-premises Active Directory security and password policies.Īctive Directory Federated Services (ADFS) When users sign in using Azure AD, this feature validates users' passwords directly against your on-premises Active Directory. Azure Active Directory (Azure AD) Pass-through Authentication enables users to sign in to both on-premises and cloud-based applications using the same passwords. If you need to manage password authentication requests from your own on-premise active directory, you'll still use AAD Connect, but you'll need to use the Passthrough Authentication Option instead of Password Hash Sync. You'll only have to manage one server and this path will give you seamless single sign-on and cloud multi-factor authentication.ĪAD Connect with Passthrough Authentication Express Settings is the default option and is used for the most commonly deployed scenarios. This path is easier and cheaper to deploy because you can use Azure AD Connect Express Settings. The most efficient path to move from an on-premise active directory is using AAD Connect with Password Hash Sync for authentication. There are three ways to move your identities to Microsoft 365 Education.ĪAD Connect with Password Hash Sync: Recommended Path If you don't need to integrate an on-premise directory and intend to provision cloud-only identities, you can skip this step and proceed to Sync your SIS with School Data Sync. This article is meant for customers who intend to integrate an on-premise active directory with Office 365. If you would like to maintain your place in this document set's table of contents, please right click on URLs to open them in a new window.
Some of the URLs in this article will take you to another document set.
0 kommentar(er)
