Device sync with Microsoft Entra Cloud Sync (preview)
Not even a week ago Microsoft announced Device sync with Microsoft Entra Cloud Sync (preview), not to be confused with Microsoft Entra Connect which is the on-premises solution 🤣
This is a big deal because it means that you can now sync devices from on-premises Active Directory to Microsoft Entra ID without having to use the on-premises solution. That seems to have been a significant gap in the product which is now being addressed 😊
A few people on X (Twitter) have been vocal and very happy about it, it is also how I found out about this to begin with so kudos to them!
Original article
Configure device sync with Microsoft Entra Cloud Sync (preview)
What is Microsoft Entra Cloud sync?
From the official documentation:
Microsoft Entra Cloud Sync is a hybrid identity synchronization service that provides modern, cloud-managed synchronization of users, groups, and contacts between Active Directory and Microsoft Entra ID.
It represents Microsoft’s strategic direction for hybrid identity, offering a lightweight, agent-based approach that simplifies deployment and management while enabling advanced scenarios like disconnected forest synchronization.
Cloud Sync solves common challenges organizations face with hybrid identity infrastructure by eliminating single points of failure, reducing on-premises management overhead, and enabling complex multi-forest scenarios that support organizational growth and change.
There is a lot of good info including a demo video on their official documentation page: What is Microsoft Entra Cloud sync?.
Difference between Entra Cloud Sync and Entra Connect
A very nice feature comparison table can be found at Migrate from Microsoft Entra Connect to Cloud Sync: Decision Guide.
So what is changing is that this goes from not supported (✗) to preview (√):
| Feature | Entra Connect | Entra Cloud Sync | Notes |
|---|---|---|---|
| Device Synchronization | ✓ | ✗ | Connect supports Hybrid Azure AD Join; not currently supported in Cloud Sync |
Device Synchronization: Sends computer objects from on-premises AD to Microsoft Entra ID to support Microsoft Entra hybrid join*.
* Microsoft Entra hybrid join is an identity configuration that connects devices to both an on-premises Windows Server Active Directory (AD) and Microsoft Entra ID at the same time. It lets existing domain-joined computers access local network shares and cloud-based resources using seamless single sign-on.
How does Microsoft Entra Cloud Sync differ from Microsoft Entra Connect Sync?
- Cloud-managed orchestration: Provisioning is managed through Microsoft Online Services rather than an on-premises sync server
- Lightweight agents: Secure agents connect on-premises Active Directory or IaaS environments to Microsoft Entra ID
- Simplified management: Configuration, monitoring and administration are handled through the cloud service
- Reduced infrastructure: Less complexity and overhead associated with maintaining dedicated sync servers
- Flexible multi-forest support: Identities can be synchronized from multiple disconnected AD forests into a single Microsoft Entra tenant without forest consolidation
Useful links
- Configure device sync with Microsoft Entra Cloud Sync (preview)
- What is Microsoft Entra Cloud sync?
- Migrating from Microsoft Entra Connect to Microsoft Entra Cloud Sync
- Migrate from Microsoft Entra Connect to Cloud Sync: Decision Guide
- Microsoft Entra hybrid joined devices
- Plan your Microsoft Entra hybrid join implementation