Azure Active Directory : Sign-in Disaster Recovery

Sandeep Kumar Noolu 21 Reputation points
2020-03-03T01:26:36.28+00:00

Just wondering if anyone has inputs on how to implement sign-in disaster recovery mentioned in this guide - https://learn.microsoft.com/en-us/azure/security/fundamentals/choose-ad-authn (bottom right decision box in the decision tree diagram). As per AD Connect setup document, seems like we have only one sign-on method to select during installation process. Thanks.

Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
20,158 questions
0 comments No comments
{count} votes

Accepted answer
  1. AmanpreetSingh-MSFT 56,456 Reputation points
    2020-03-03T04:47:45.783+00:00

    @Sandeep Kumar Noolu You can enable Password Hash Synchronization (PHS) as backup option for both Pass Through Authentication (PTA) and Federated Authentication by performing below steps:

    1. Run the Azure AD Connect wizard on your AD Connect server.
    2. Click on Customize synchronization options and connect to Azure AD using Global Administrator credentials.
    3. On the Optional Features page, you need to select the checkbox for Password Hash Synchronization to enable it as backup option.

    Note: Your primary sign-in method would be the one selected under User Sign-in page. If primary sign-in method fails, you will not automatically fallback to Password Hash Synchronization. You would need to manually change the primary sign-in method to Password Hash Synchronization in that case.

    -----------------------------------------------------------------------------------------------------------

    Please "Accept as answer" wherever the information provided helps you to help others in the community.

    1 person found this answer helpful.

0 additional answers

Sort by: Most helpful