Microsoft Azure Security Technologies (AZ-500)

Is using password hash synchronization and seamless SSO a recommended strategy for Azure AD and Active Directory integration?

1. Yes

2. No

3. Only when using multi-factor authentication

4. Yes, but keep it legacy

The correct answer is: No

Using password hash synchronization and seamless single sign-on (SSO) is indeed a recommended strategy for Azure Active Directory (Azure AD) and on-premises Active Directory integration. This approach facilitates a smoother user experience by allowing users to authenticate using the same credentials for both environments, while also supporting modern authentication methods. Password hash synchronization allows for the users' passwords to be securely hashed and synchronized from on-premises Active Directory to Azure AD. This means that once users change their password in the on-premises environment, the new password is automatically updated in Azure AD, ensuring that users have a consistent experience across services. Seamless SSO enhances this by enabling users to access Azure AD resources without needing to manually enter their credentials when they are connected to their corporate network. This feature relies on Azure AD's ability to detect the user's domain-joined status and authenticate automatically. Overall, implementing both password hash synchronization and seamless SSO simplifies the login process and improves security, making it a preferred strategy for organizations looking to integrate their on-premises AD with Azure AD.