AAD - ADConnect

Question 1

AAD Authentication Methods

Answer 1

PHS - Password Hash Synchronization
PTA - Pass-Through Authentication
Federation

Question 2

AAD Tools

Answer 2

Sync Scheduler
Rules Editor
AD Connect Health

Question 3

Federation

Benefits and Issues

Answer 3

• Support smartcard
• On-Prem MFA
• Password Expiry Notification
• Account lifecycle/timing supported
• Complex / Expansive
• Do not support seamless Authentication

Question 4

Federation Requirements

Answer 4

AD-FS Server - internal sign-in
WAP Proxy - external sign-in
Load Balancer
Multiple Servers for HA

Question 5

Seem less Login

Answer 5

Internal Access, no Username/password needed

Question 6

PHS

Password Hash Sync

Answer 6

Hash - Double Hashed
Supports O365 hybrid identity
Backup of Federation Authn. system
MFA only works with Azure AAD - no 3rd party

Question 7

PTA
Pass-Through Authentication

• best

Answer 7

All on-prem account policies enforceable
No on-prem MFA supported
Detection of user with leaked credentials not possible
Seem less SSO is supported
Multiple PTA Agents are required

Question 8

Sync Scheduler runs after

Answer 8

every 3o minutes by default