Ask Learn Preview
Please sign in to use this experience.
Sign inThis browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
Microsoft Entra Cloud Sync is a new offering from Microsoft designed to meet and accomplish your hybrid identity goals for synchronization of users, groups, and contacts to Microsoft Entra ID. It accomplishes this by using the Microsoft Entra cloud provisioning agent instead of the Microsoft Entra Connect application. However, it can be used alongside Microsoft Entra Connect Sync and it provides the following benefits:
With Microsoft Entra Cloud Sync, provisioning from AD to Microsoft Entra ID is orchestrated in Microsoft Online Services. An organization only needs to deploy, in their on-premises or IaaS-hosted environment, a light-weight agent that acts as a bridge between Microsoft Entra ID and AD. The provisioning configuration is stored in Microsoft Entra ID and managed as part of the service.
The following table provides a comparison between Microsoft Entra Connect and Microsoft Entra Cloud Sync:
Feature | Connect sync | Cloud sync |
---|---|---|
Connect to single on-premises AD forest | ● | ● |
Connect to multiple on-premises AD forests | ● | ● |
Connect to multiple disconnected on-premises AD forests | ● | |
Lightweight agent installation model | ● | |
Multiple active agents for high availability | ● | |
Connect to LDAP directories | ● | |
Support for user objects | ● | ● |
Support for group objects | ● | ● |
Support for contact objects | ● | ● |
Support for device objects | ● | |
Allow basic customization for attribute flows | ● | ● |
Synchronize Exchange online attributes | ● | ● |
Synchronize extension attributes 1-15 | ● | ● |
Synchronize customer defined AD attributes (directory extensions) | ● | ● |
Support for Password Hash Sync | ● | ● |
Support for Pass-Through Authentication | ● | |
Support for federation | ● | ● |
Seamless Single Sign-on | ● | ● |
Supports installation on a Domain Controller | ● | ● |
Support for Windows Server 2016 | ● | ● |
Filter on Domains/OUs/groups | ● | ● |
Filter on objects' attribute values | ● | |
Allow minimal set of attributes to be synchronized (MinSync) | ● | ● |
Allow removing attributes from flowing from AD to Microsoft Entra ID | ● | ● |
Allow advanced customization for attribute flows | ● | |
Support for password writeback | ● | ● |
Support for device writeback | ● | Customers should use Cloud Kerberos trust for this moving forward |
Support for group writeback | ● | ● |
Support for merging user attributes from multiple domains | ● | |
Microsoft Entra Domain Services support | ● | |
Exchange hybrid writeback | ● | ● |
Unlimited number of objects per AD domain | ● | |
Support for up to 150,000 objects per AD domain | ● | ● |
Groups with up to 50,000 members | ● | ● |
Large groups with up to 250,000 members | ● | |
Cross domain references | ● | ● |
On-demand provisioning | ● | |
Support for US Government | ● | ● |
Having an issue? We can help!
Please sign in to use this experience.
Sign in