Azure AD Connect - Hybrid Identity
- If you want to see your company advertised in HackTricks or if you want access to the latest version of the PEASS or download HackTricks in PDF Check the SUBSCRIPTION PLANS!
On-premises AD can be integrated with Azure AD using Azure AD Connect with the following methods. Every method supports Single Sign-on (SSO):
- Password Hash Sync (PHS)
- Pass-Through Authentication (PTA)
- Federation
For each method, at least the user synchronization is done and an account with the name
MSOL_<installationidentifier> is created on the on-prem AD.Moreover, both PHS and PTA support Seamless SSO to automatically sign in in Azure AD computers joined to the on-prem domain.
It's possible to check if Azure AD Connect is installed with this command from the AzureADConnectHealthSync module that is installed by default on installation of Azure AD Connect:
Get-ADSyncConnector
- If you want to see your company advertised in HackTricks or if you want access to the latest version of the PEASS or download HackTricks in PDF Check the SUBSCRIPTION PLANS!
Last modified 10mo ago