Mastering Active Directory - Second Edition

Synchronization

Synchronization controls how your identities are appearing in the cloud. In a typical AD environment, engineers do identity-related changes such as password changes, name changes, group membership changes, and add/remove custom attributes. In a hybrid environment, the cloud identity should represent the same characteristics of an on-premises identity. This is why synchronization is crucial. Azure AD Connect is a Microsoft tool that was designed to sync on-premises identity to the cloud.

Azure AD Connect has five main features:

• Synchronization services: This service checks whether Azure AD has the same identities and attributes as on-premises AD. If it doesn't match, it will replicate relevant objects and changes to Azure ...