什么是与 Azure AD 的密码哈希同步?What is password hash synchronization with Azure AD?

密码哈希同步是用来实现混合标识的登录方法之一。Password hash synchronization is one of the sign-in methods used to accomplish hybrid identity. Azure AD Connect 将用户密码的哈希从本地 Active Directory 实例同步到基于云的 Azure AD 实例。Azure AD Connect synchronizes a hash, of the hash, of a user's password from an on-premises Active Directory instance to a cloud-based Azure AD instance.

密码哈希同步是由 Azure AD Connect 同步实现的目录同步功能的扩展。可以使用此功能登录到 Azure AD 服务,例如 Office 365。Password hash synchronization is an extension to the directory synchronization feature implemented by Azure AD Connect sync. You can use this feature to sign in to Azure AD services like Office 365. 登录到该服务时使用的密码与登录到本地 Active Directory 实例时使用的密码相同。You sign in to the service by using the same password you use to sign in to your on-premises Active Directory instance.

什么是 Azure AD Connect

密码哈希同步通过将用户需要维护的密码数目减少为一个来提供帮助。Password hash synchronization helps by reducing the number of passwords, your users need to maintain to just one. 密码哈希同步可以:Password hash synchronization can:

  • 提升用户的生产力。Improve the productivity of your users.
  • 减少技术支持成本Reduce your helpdesk costs.

若要在环境中使用密码哈希同步,需要:To use password hash synchronization in your environment, you need to:

  • 安装 Azure AD Connect。Install Azure AD Connect.
  • 配置本地 Azure Active Directory 实例与 Azure Active Directory 实例之间的目录同步。Configure directory synchronization between your on-premises Active Directory instance and your Azure Active Directory instance.
  • 启用密码哈希同步。Enable password hash synchronization.

有关详细信息,请参阅什么是混合标识?For more information, see What is hybrid identity?.

后续步骤Next Steps