Azure AD Connect - Hybrid Identity
On-premises AD can be integrated with Azure AD using Azure AD Connect with the following methods. Every method supports Single Sign-on (SSO):
- Password Hash Sync (PHS)
- Pass-Through Authentication (PTA)
For each method, at least the user synchronization is done and an account with the name
MSOL_<installationidentifier>is created on the on-prem AD.
Moreover, both PHS and PTA support Seamless SSO to automatically sign in in Azure AD computers joined to the on-prem domain.
It's possible to check if Azure AD Connect is installed with this command from the AzureADConnectHealthSync module that is installed by default on installation of Azure AD Connect: