Password hash sync

Migrate from AD FS to Entra cloud authentication with staged rollout

Move federated Microsoft Entra domains from AD FS to password hash sync or pass-through authentication, pilot with staged rollout, cut over each domain and retire AD FS.