Microsoft Entra Cloud Sync is a cloud-first identity synchronization service that uses lightweight on-premises agents to provision Active Directory identities into Microsoft Entra ID.
Simple definition
Microsoft Entra Cloud Sync is a cloud-first identity synchronization service that uses lightweight on-premises agents to provision Active Directory identities into Microsoft Entra ID. It belongs to the Microsoft 365 / Entra / Intune vocabulary and is useful when reading architecture diagrams, product documentation, logs, or administration procedures.
What is it used for?
Its main purpose is to synchronize hybrid identities with less on-premises infrastructure and support flexible multi-forest scenarios. The practical value depends on the surrounding architecture, security model, and operational requirements.
How does it work?
The provisioning service is orchestrated in the cloud and sends work to a Microsoft Entra provisioning agent that connects outbound from the AD environment.
Key points
- Scope: A cloud-first identity synchronization service that uses lightweight on-premises agents to provision Active Directory identities into Microsoft Entra ID.
- Operational goal: Synchronize hybrid identities with less on-premises infrastructure and support flexible multi-forest scenarios.
- Implementation: The provisioning service is orchestrated in the cloud and sends work to a Microsoft Entra provisioning agent that connects outbound from the AD environment.
Points to watch
Compare Cloud Sync and Entra Connect Sync against required features, transformations, resiliency, and hybrid scenarios before migration.
In short
Microsoft Entra Cloud Sync = a cloud-first identity synchronization service that uses lightweight on-premises agents to provision Active Directory identities into Microsoft Entra ID. Use it when you need to synchronize hybrid identities with less on-premises infrastructure and support flexible multi-forest scenarios.