A large enterprise with multiple Active Directory forests needs to synchronize user identities from all forests to a single Microsoft Entra ID tenant. Each forest has its own distinct schema extensions and attribute definitions. The company requires a robust and flexible synchronization solution that can handle these complexities and provide advanced attribute flow customization. Which component of Microsoft Entra Connect is best suited for this requirement?
- AMicrosoft Entra Connect Sync Service Manager
- BMicrosoft Entra Connect Pass-through Authentication agents
- CMicrosoft Entra Connect Health
- DMicrosoft Entra Connect Cloud Sync
Show answer & explanationAnswer & explanation
Correct answer: A. Microsoft Entra Connect Sync Service Manager
The Microsoft Entra Connect Synchronization Service Manager (also known as the Synchronization Rules Editor) is the tool used for advanced configuration of attribute flow, custom synchronization rules, and handling complex multi-forest scenarios with schema extensions. It provides the flexibility required to map and transform attributes across different directories and schemas.
Why the other options are wrong
- B. PTA agents are for authentication, not for synchronizing and customizing attribute flow.
- C. Connect Health monitors the health of sync services, not configures sync rules.
- D. Cloud Sync is a lightweight agent for simple sync from single/multiple disconnected forests, but has less customization than full Connect Sync Service Manager.
Microsoft Entra Connect Sync Service Manager
The Microsoft Entra Connect Synchronization Service Manager is a tool used to configure advanced synchronization settings, including custom synchronization rules, attribute flow, and connector space management.
- Enables granular control over identity synchronization.
- Essential for complex multi-forest environments and schema extensions.
- Allows for creation and modification of inbound and outbound synchronization rules.
Memory trick: Connect Health checks health, Sync Manager handles rules, Cloud Sync is lightweight, PTA is for authentication.