How to sync on premise local AD to Azure AD

Question

Hi everyone. Currently I have 1 on premise AD and 1 Azure AD. Both are not sync, therefore when the time users needed to change password (expired 60 days), they would need to change both ends.

Can I know any best and simple solution to sync the AD or should I migrate everything to cloud, if yes what is the advice.

Thanx

Answer 1

Hello @Pinsen Kwan · Thank you for reaching out.

You can use Azure AD Connect to sync your On-premises accounts to Azure AD.
Download link: https://www.microsoft.com/en-us/download/details.aspx?id=47594

After downloading AD Connect, you can deploy Azure AD Pass-through Authentication to allows your users to sign in to both on-premises and cloud-based applications by using the same passwords. Pass-through Authentication signs users in by validating their passwords directly against on-premises Active Directory.
For step by step instructions, please refer to https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta-quick-start.

Alternatively, you can deploy Azure AD Connect with Password Hash Sync, which syncs password hash from On-premises to Azure AD. Ref: https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-express . If you choose to go with this option, you will need to configure password writeback as explained here: https://learn.microsoft.com/en-us/azure/active-directory/authentication/tutorial-enable-sspr-writeback

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.