Question

Contoso runs Active Directory on-premises and wants employees to sign in to Microsoft 365 cloud apps using the same username and password they already use for their domain accounts. The IT team wants the simplest option that keeps authentication working even if the on-premises servers become temporarily unavailable. Which approach should they implement?

Accepted Answer

Configure a hybrid identity by synchronizing accounts to Microsoft Entra ID with password hash synchronization

Answer

Create separate cloud-only identities in Microsoft Entra ID for every employee

Answer

Invite each employee as a B2B guest user from a partner tenant

Answer

Register each employee's account as a managed identity in Microsoft Entra ID