Hi everyone, today we have a post by Intune Support Engineer Saurabh Sarkar where he talks about some of the options available when setting up Azure AD Connect to enable hybrid identify for the Azure...
Updated Jun 25, 2019
Version 2.0
Blog Post
Worth mentioning that with PTA (Pass through auth) your servers with PTA agents have to be online 24/7 or your users will lose connectivity to online services like Skype, Exchange, etc. And PTA also requires some inbound ports to be opened. Password writeback (probably device writeback also) requires Azure AD Premium licenses.
PTA and PHS are authentication methods, but even if you select PTA, there is also a separate setting in AD Connect wizard - Customize synchronization options called Password synchronization. Which at least in the past had to be enabled for first login in Skype to work, even if PTA is used for authentication. I wish MS would make this less confusing with similarly named settings in various parts of a wizard..