Users can now use their passwords to sign in to Azure and Azure services. When configuration is finished, select Exit.In Ready to configure, select Configure.Leave the default Enable single sign-on selected and select Next.In User sign-in, select Password hash synchronization, and then select the Do not convert user accounts checkbox.Enter the username and password for the Hybrid Identity Administrator account you created in the tutorial to set up federation.Select Change user sign-in, and then select Next.

If you decide to make the switch because fixing the problem will take too long, complete these steps: Don't make the switch for temporary reasons, like a network outage, a minor AD FS problem, or a problem that affects a subset of your users. Before you start, consider in which conditions you should make the switch. Next, switch over to password hash synchronization. It might be up to three hours before the sync finishes and you can start authenticating by using the password hashes. It takes some time for the password hashes to sync to Azure AD.

You can create a backup by using the AD FS Rapid Restore Tool. Switch to password hash syncīefore you switch to password hash sync, create a backup of your AD FS environment.

Password hash sync will now occur, and it can be used as a backup if AD FS becomes unavailable. When configuration is finished, select Exit. In Optional features, select Password hash synchronization, and then select Next. In Connect your directories, select Next. In Additional tasks, select Customize synchronization options, and then select Next.Įnter the username and password for the Hybrid Identity Administrator account you created in the tutorial to set up federation. Your first step in setting up your backup for federation is to turn on password hash sync and set Azure AD Connect to sync the hashes:ĭouble-click the Azure AD Connect icon that was created on the desktop during installation. In Tutorial: Use federation for hybrid identity in a single Active Directory forest, you created an Azure AD Connect environment that's using federation. Enable password hash sync in Azure AD Connect If you don't have access to an Azure AD Connect server or the server doesn't have internet access, you can contact Microsoft Support to assist with the changes to Azure Active Directory (Azure AD).

Beginner tutorial procreate