Forum Discussion

Gurdev Singh's avatar
Gurdev Singh
Iron Contributor
Jun 13, 2019

Azure AD Connect sync account MFA support

Does the account that AAD Connect uses to connect to Azure AD requires MFA to be disabled? It's the account that AAD Connect creates itself during the installation process.   Recently, we noticed t...
Azure Active Directory (AAD)
Adam__Brown__'s avatar
Adam__Brown__
Copper Contributor

Gurdev Singh 

 

MFA is definately the issue here, I came across your post after experiencing similar issues. MFA was enfored to all accounts by Microsoft and disrupted our AD sync. The account i authenticated with in Azure AD was set to disabled for MFA but the issue remained. After much digging i then discovered that the account actually used for the sync was an account called sync_servername_tenant.

 

Within the admin portal search for a user starting with Sync_ your server name should follow after the _.

 

Once found visit the Multi-factor authentication menu and disabled multi-factor authentication for this sync_servername account.

 

Its this account that is used by Azure AD Connect to sync on-prem AD to Azure. Once disabled you will find that your AD Connect sync resumes without issue.

austinwatling's avatar
austinwatling
Copper Contributor
Jul 29, 2024
Just wanted to bump this answer as this was the issue we were having as well. Thank you thank you!

Resources