Configure Pass-through Authentication
Question
You have a Microsoft 365 subscription and are planning to install AD Connect to support an Active Directory hybrid identity solution.
Your company is using a 3rd party authentication solution that requires smartcards.
You need to choose an authentication method for the Azure AD hybrid identity solution.
What do you do? Solution: You configure Pass-through authentication.
Answers
Explanations
Click on the arrows to vote for the correct answer
A. B.Correct Answer: B
Pass-through authentication is not compatible with 3rd MFA solutions or smartcards.
Pass-through authentication should be used when the password validation must be on-premise, as it relies on local Active Directory for authentication.
It is set up by installing an agent on an on-premise server that allows Azure AD to validate local AD passwords and usernames.
Reference:
To know more about Pass-through authentication, please refer to the link below:
The correct answer is A. Yes.
Explanation: AD Connect is a tool that synchronizes on-premises Active Directory identities to Azure AD, providing a hybrid identity solution. To support authentication for this solution, Azure AD provides different authentication methods, such as Password Hash Synchronization, Pass-through Authentication, and Federation.
In this scenario, the company is using a third-party authentication solution that requires smart cards. This means that Pass-through Authentication is the best authentication method to use in this situation. Pass-through Authentication provides an authentication method that enables the use of smart card authentication without storing user credentials in the cloud.
In contrast, Password Hash Synchronization syncs hashed credentials to Azure AD, which means that the user's passwords are stored in the cloud, making it less secure than Pass-through Authentication. Federation, on the other hand, requires an on-premises server to be set up, which can be complex and may not be required in this scenario.
Therefore, the best solution in this scenario is to configure Pass-through authentication, making sure that the on-premises Active Directory is properly configured to support smart card authentication.
