Azure AD Connect - Hybrid Identity

Support HackTricks and get benefits!
On-premises AD can be integrated with Azure AD using Azure AD Connect with the following methods. Every method supports Single Sign-on (SSO):
  • Password Hash Sync (PHS)
  • Pass-Through Authentication (PTA)
  • Federation
For each method, at least the user synchronization is done and an account with the name MSOL_<installationidentifier> is created on the on-prem AD.
Moreover, both PHS and PTA support Seamless SSO to automatically sign in in Azure AD computers joined to the on-prem domain.
It's possible to check if Azure AD Connect is installed with this command from the AzureADConnectHealthSync module that is installed by default on installation of Azure AD Connect:



Seamless SSO


Support HackTricks and get benefits!