Built a hybrid identity environment that synchronizes on-premises Active Directory users and groups with Microsoft Entra ID using Microsoft Entra Connect Sync.
This project simulates how organizations integrate traditional on-prem identity infrastructure with cloud identity services while keeping centralized user management.
Many organizations still rely on on-premises Active Directory for identity management while also using Microsoft 365, Azure, and other cloud services.
This project demonstrates a hybrid identity setup by deploying a domain controller in Azure, configuring Active Directory Domain Services (AD DS), installing Entra Connect Sync, and validating synchronized users in Microsoft Entra ID.
- Windows Server domain controller deployed in Azure
- Active Directory Domain Services configured
- Test domain created for hybrid identity simulation
- Users and groups created in on-prem AD
- Microsoft Entra Connect Sync installed and configured
- OU filtering used to control synchronized identities
- Synced users validated in Microsoft Entra admin center
On-prem Active Directory (AD DS)
↓
Microsoft Entra Connect Sync
↓
Microsoft Entra ID
↓
Microsoft 365 / Azure / Cloud Applicationsentra-hybrid/
├── README.md
├── architecture/
├── images/
├── docs/
├── bicep/
└── scripts/- Microsoft Azure
- Microsoft Entra ID
- Active Directory Domain Services (AD DS)
- Microsoft Entra Connect Sync
- Windows Server
- Azure Virtual Network
- PowerShell
- Azure Bicep
- Hybrid identity synchronization
- Organizational Unit (OU) filtering
- On-prem AD user and group management
- Identity synchronization validation
- Centralized identity administration
- Secure domain controller deployment
The images/ folder includes:
- Azure VM deployment
- AD DS installation
- Domain controller promotion
- Active Directory users and groups
- Microsoft Entra Connect setup
- OU filtering configuration
- Synced users in Microsoft Entra ID
Additional implementation and troubleshooting documentation:
docs/implementation-guide.mddocs/troubleshooting.mddocs/identity-sync-report.mddocs/lessons-learned.md
- Hybrid identity remains widely used in enterprise environments
- OU filtering helps control which identities are synchronized to the cloud
- Microsoft Entra Connect Sync simplifies hybrid identity integration
- Proper identity planning is important for secure synchronization
- This project improved my understanding of identity flow between AD DS and Microsoft Entra ID
Planned enhancements include:
- Conditional Access testing
- Password Hash Sync validation
- Multi-Factor Authentication (MFA)
- Hybrid identity troubleshooting scenarios
- Group-based access control testing
Completed — continuously improving with additional identity and security scenarios.