Mastering Active Directory - Second Edition

Password hash synchronization

This is the most commonly used method to allow on-premises AD users to authenticate into Azure services via Azure AD using their existing on-premises AD passwords. It is easy to implement as it is an extension of the Azure AD Connect directory synchronization. It doesn't require any other additional components to be installed on-premises other than Azure AD Connect. It is also recommended that you use this as a backup sign-in method, even if you decided to use a federation or pass-through sign-in method.

When I talk to customers or engineers, on many occasions, I find that people think password hash synchronization uses clear text passwords; however, this is completely wrong. On-premises AD doesn't use clear ...