Note
Access to this page requires authorization. You can try signing in or changing directories.
Access to this page requires authorization. You can try changing directories.
Compare Microsoft Entra Cloud Sync, Connect Sync, Microsoft Identity Manager (MIM), and the ECMA Host connector to find a tool that supports your hybrid identity and provisioning scenarios.
Supported sync scenarios
The following table outlines the most common and supported sync scenarios.
| Scenario | Supported with Cloud Sync | Supported with Connect Sync | Supported with MIM and the Graph Connector | Supported with ECMA Host connector |
|---|---|---|---|---|
| New Hybrid customers managing identities | ● | ● | ● | N/A |
| Mergers and acquisitions (disconnected forest) | ● | N/A | ● | N/A |
| High availability - latency (I need high availability) | ● | N/A | ● | N/A |
| Migration from Connect Sync to Cloud Sync | ● | ● | N/A | N/A |
| Microsoft Entra hybrid join | ● | ● | N/A | N/A |
| Exchange hybrid | ● | ● | N/A | N/A |
| User accounts in one forest / mailboxes in resource forest | N/A | ● | N/A | N/A |
| Sync large domains with more than 250K objects | N/A | ● | ● | N/A |
| Filter directory objects based on attribute values | N/A | ● | ● | N/A |
| Windows Hello for Business | N/A | ● | N/A | N/A |
| Synchronize from cloud to on-premises AD | N/A | N/A | ● | N/A |
| Synchronize from cloud to on-premises LDAP | N/A | N/A | ● | ● |
| Synchronize from cloud to on-premises SQL | N/A | N/A | ● | ● |
For steps to configure device synchronization in Cloud Sync, see Configure device sync with Microsoft Entra Cloud Sync.
Supported provisioning scenarios
The following table outlines the common and supported provisioning scenarios.
| Scenario | Supported with Cloud Sync | Supported with Connect Sync | Supported with MIM and the Graph Connector | Supported with ECMA Host connector |
|---|---|---|---|---|
| Group provisioning to Active Directory | ● | N/A | ● | N/A |
For more information, see Supported topologies for Cloud Sync and Supported topologies for Connect Sync.
Additional information
- You can synchronize users and groups from the same domain by using Connect Sync and Cloud Sync if:
- Scoping filters in each sync is mutually exclusive
- If inclusive, don’t have the same attributes values clashing (Precedence isn’t supported)
- You can synchronize users and groups with Connect Sync while using Cloud Sync's new capabilities.
- You can sync objects from a single AD to multiple Azure ADs if writeback capabilities are enabled only in a single Microsoft Entra tenant.
Cloud Sync and Connect Sync in parallel
You can run Cloud Sync and Microsoft Entra Connect in the same forest. For example, you might use Cloud Sync for most scenarios and Microsoft Entra Connect for scenarios that require its features. The tutorial Migrate to Microsoft Entra Cloud Sync for an existing synced AD forest shows how to run both tools.