Microsoft Entra ID
Provisioning

Microsoft Entra Cloud Sync migration decision guide

In brief

The decision guide now states that Cloud Sync supports device synchronization for Microsoft Entra hybrid join. Device synchronization must be enabled separately, with updated migration guidance and configuration steps.

What Entra admins need to know

Administrators migrating hybrid-joined devices to Cloud Sync should include device synchronization in their migration plan and enable it separately.

This editorial summary was generated by AI from the documentation changes. Verify important details in the full Microsoft Learn article.

Documentation change

The comparison below shows only the changed extract. Use the full-page view for complete context.

Migrate from Microsoft Entra Connect to Cloud Sync: Decision Guide

Microsoft Entra Cloud Sync represents Microsoft's strategic direction for hybrid identity synchronization, offering a modern,synchronization. It provides cloud-managed approach to synchronizingsynchronization of users, groups, and contacts between Active Directory and Microsoft Entra ID. As organizations evaluate theirWhen device sync is enabled, Cloud Sync can synchronize Active Directory computer objects to Microsoft Entra ID for hybrid identity infrastructure, understanding the technical benefits and migration readiness is essential for making informed decisions.join.

This decision guide helps IT architects and decision makers evaluate migration from Microsoft Entra Connect to Cloud Sync by comparing technical capabilities, identifying architectural advantages, and providing migration readiness assessments. For basic overview information, see What is Microsoft Entra Cloud Sync?, and for. For step-by-step migration procedures, see Migrating from Microsoft Entra Connect to Microsoft Entra Cloud Sync.

New identity and synchronization features are being developed primarily on the Cloud Sync platform, making it the recommended path forward for most organizations.

| Single Connected Forest | ✓ | ✓ | Both support standard single-forest topologies | | Multiple Connected Forests | ✓ | ✓ | Both support multiple connected forest scenarios | | Disconnected Forest Support | ✗ | ✓ | Cloud Sync enables M&A scenarios without forest consolidation | | Device Synchronization | ✓ | ✗✓ | Connect supports Hybrid Azure AD Join; not currently supportedBoth support device synchronization for Microsoft Entra hybrid join; enable device sync separately in Cloud Sync | | Multiple Active Sync Instances | ✗ | ✓ | Cloud Sync agents provide automatic failover and load distribution | | Scale Limits per Domain | Unlimited | 150K objects | Cloud Sync currently supports up to 150,000 objects per domain | | Large Group Support | 250K members | 50K members | Connect supports larger groups; Cloud Sync limited to 50,000 members | | Seamless Single Sign-On | ✓ | ✓ | Both platforms support seamless SSO | | US Government Cloud | ✓ | ✓ | Both support sovereign cloud deployments |

For configuration steps, see Configure device sync with Microsoft Entra Cloud Sync.

Migration readiness assessment

Based on your current requirements and the feature comparison in the table above, assess your migration readiness using these scenarios:

  • Object Scale: Fewer than 150,000 objects per Active Directory domain
  • Group Size: Groups with fewer than 50,000 members
  • Device Management: Not using Hybrid Azure AD Join, or willing to transition toIf you use Microsoft Entra hybrid join, include device sync in your Cloud Kerberos TrustSync migration plan
  • Authentication: Using Password Hash Sync or managing ADFS/PTA configurations separately.
  • Filtering: Using OU-based filtering rather than complex attribute-based rules
  • Forest Configuration: Single forest or connected forests (no disconnected forest requirements)

Consider planning migration based on feature availability if you have these requirements that might become supported:

  • Device Synchronization: Currently rely on Hybrid Azure AD Join device synchronization
  • Advanced Filtering: Use complex attribute-based filtering beyond current Cloud Sync capabilities
  • User Provisioning to AD: Need cloud-to-AD user provisioning capabilities
Daily Entra.News

Get daily email updates

Get a concise summary of the latest Microsoft Entra updates delivered straight to your inbox.

Loading the secure signup form…