Search code examples
azure-active-directoryazure-ad-domain-services

Pass Through Auth (PTA) and Password Hash Sync (PHS)

In our environment, we are using pass though auth for Azure AD but for Azure AD Domain service, we need to enable Password Hash Sync as well. I have few questions on that:

1) Can we enable both PTA and PHS? 2) If above is possible, then which one will be the primary auth? 3) Can we enable PTA for Azure AD and PHS for Azure AD DS? 3) Can we make PHS primary and PTA as manual failover?

Thanks in advance

Solution

  • Currently, it's not possible to enable both PTA and PHS from one AAD Connect.

    In the future, there may be have some other light tools for this but it has no ETA from Microsoft Azure AD Product Group.