Can I connect two separate domains within Entra Password Protection by proxy servers from one domain?

Question

Hello Community,

I am wondering if I need additional two VMs in the domain B for proxy servers if I already have Entra Password Protection implemented in the domain A?

Domains are in the seperate forests, without any trust beetwen them, but the password policy will be the same.

Of course assuming that DCs agents in the domain B will have connectivity with the proxy servers from domain A.

If not, does Entra Password Protection will support two separate forests with server proxy on each and on the one tenat?

Answer 1

Hello @Maciej Szafranek , Microsoft Entra Password Protection proxy cannot serve requests from agents installed in other forests. However, you can target the same Entra ID tenant from multiple forests. Fore more information take a look to Multiple forest considerations.

Let us know if you need additional assistance. If the answer was helpful, please accept it and rate it so that others facing a similar issue can easily find a solution.