Question

Contoso runs Active Directory Domain Services on-premises and has recently adopted Microsoft 365. The IT team wants on-premises user accounts to automatically appear in Microsoft Entra ID so employees can sign in to cloud apps with the same credentials, without deploying heavy infrastructure. Which approach establishes this hybrid identity?

Accepted Answer

Synchronize on-premises accounts to Microsoft Entra ID using a directory synchronization tool such as Microsoft Entra Cloud Sync

Answer

Recreate each user manually as a cloud-only identity in Microsoft Entra ID

Answer

Register each employee as a B2B guest user from a partner tenant

Answer

Configure each user as a workload identity with a service principal