Contoso Pharmaceuticals has an on-premises Active Directory Domain Services (AD DS) environment and multiple Microsoft Entra ID tenants. The company needs to design a hybrid and multi-tenant identity solution to satisfy various connectivity, security, and partnership requirements. Match each operational requirement to the most appropriate Microsoft Entra ID synchronization or collaboration feature.
- Synchronize user accounts from on-premises AD DS to Azure and allow sign-in even during local network outages, without using federation.Password Hash Synchronization (PHS)
- Validate user passwords against on-premises AD DS in real-time using lightweight local agents, ensuring passwords are never stored in the cloud in any form.Pass-through Authentication (PTA)
- Automate the provisioning and lifecycle management of user accounts across multiple distinct Microsoft Entra ID tenants owned by the same parent organization.Cross-tenant synchronization
- Enable external contractors to authenticate using their existing corporate or consumer identity provider to access shared corporate resources.Microsoft Entra B2B collaboration
Answer
Password Hash Synchronization (PHS) matches the requirement to allow sign-in during local network outages without federation. Pass-through Authentication (PTA) matches the requirement to validate passwords against on-premises AD DS in real-time. Cross-tenant synchronization matches the requirement to automate user account management across distinct Microsoft Entra ID tenants. Microsoft Entra B2B collaboration matches the requirement to enable external contractors to authenticate using their existing identity providers.
The correct association maps each business requirement to its specific technical implementation. Password Hash Synchronization supports cloud-based authentication during local link failures. Pass-through Authentication ensures zero-cloud credential footprint by executing validation on-premises in real-time. Cross-tenant synchronization facilitates identity management across different corporate tenants. B2B collaboration enables external users to access internal resources using their native credentials.
Step-by-Step Solution
Key Concept
Selecting appropriate synchronization and collaboration technologies based on organizational requirements, security constraints, and network topology.