Microsoft Entra Connect Sync
On-premises synchronization engine that projects Active Directory objects and password hashes into Microsoft Entra ID every 30 minutes.
- Provider
- azure
- Kind
- Worker
- Category
- Compute
- Official docs
- https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-azure-ad-connect
- Also known as
- Azure AD Connect
| property | type | values | required | kind default | this component |
|---|---|---|---|---|---|
| accelerator | enum | none | gpu | asic | no | none | inherited |
| concurrency | integer | — | no | — | inherited |
| fanoutStrategy | enum | none | push | pull | hybrid | no | none | inherited |
| fanoutThreshold | integer | — | no | — | inherited |
| idempotent | boolean | — | no | false | inherited |
| instances | integer | — | no | — | inherited |
| managed | boolean | — | no | false | ▸ false |
| purgeRunHistoryDays | integer | — | no | 7 | inherited |
| rateControl | enum | none | fixed | aimd | no | none | inherited |
| schedule | string | — | no | — | inherited |
| signInMethod | enum | password-hash-sync | pass-through-authentication | federation | no | — | inherited |
| stagingMode | boolean | — | no | — | inherited |
| syncIntervalMinutes | integer | — | no | 30 | inherited |
| trigger | enum | queue | stream | schedule | batch | manual | yes | — | ▸ schedule |
Every rule whose selector covers this component's kind or its category. Whether a rule fires depends on the design: its properties, its edges and its groups.
push-fanout-without-celebrity-path
Pure push fan-out over a social graph is brutal at the tail: one post from an account with millions of followers becomes millions of cache writes. A follower threshold above which readers merge at read time bounds that write amplification.
- — all of these hold:
- — the node's `fanoutStrategy` is "push"
- — the node's `fanoutThreshold` has no value
- — the design contains a node of kind graph-database
shared-worker-pool-across-queues
One worker pool consuming several queues lets a slow or poisoned queue starve the others. That is precisely what the design's per-queue isolation requirement forbids.
- — all of these hold:
- — the node has more than 1 incoming edge from a queue
- — the design requirement `isolation.perQueue` is true
stateful-node-without-zone-redundancy
A stateful compute node pinned to exactly one availability zone disappears with that zone, and its state goes with it. Nodes inside a cell are exempt, because there the cell is deliberately single-zone and redundancy comes from the other cells.
- — all of these hold:
- — the node's `stateless` is false
- — the node sits inside exactly 1 availability-zone group
- — this does not hold:
- — the node sits inside at least one cell group
nodes:
- { id: "entra-connect-sync", component: "azure-entra-connect-sync" }SchedulerXalibaba-schedulerxAmazon AppFlowaws-appflowAWS B2B Data Interchangeaws-b2b-data-interchangeAWS Batchaws-batchAWS Glue DataBrewaws-databrewAWS DataSyncaws-datasyncAWS Deadline Cloudaws-deadline-cloudAWS Entity Resolutionaws-entity-resolutionAmazon EventBridge Scheduleraws-eventbridge-schedulerAWS Fault Injection Serviceaws-fisAWS Glue crawleraws-glue-crawlerAWS Glue for Ray jobaws-glue-ray-jobAWS Application Migration Serviceaws-mgnAmazon MSK Connectaws-msk-connectAmazon SageMaker AI Training Jobaws-sagemaker-training-jobAWS Systems Manageraws-systems-managerAWS Thinkbox Deadline 10aws-thinkbox-deadlineAWS Glue jobglue-jobAzure Automationazure-automationAzure Batchazure-batchAzure Chaos Studioazure-chaos-studioAzure Data Factoryazure-data-factoryAzure Data Shareazure-data-shareAzure Database Migration Serviceazure-database-migration-serviceMicrosoft Graph Data Connectazure-graph-data-connectAzure Storage Moverazure-storage-moverAzure Update Managerazure-update-managerBrowser Runcloudflare-browser-runCloudflare Snippetscloudflare-snippetsCloudflare Zarazcloudflare-zarazAirbyteairbyteAirflow DAGairflow-dagChaos Meshchaos-meshChunkrchunkrContainer workercontainer-workerCron jobcron-jobDaytonadaytonaE2Be2bEmbulkembulkFan-out daemonfanout-daemon
and 42 more → Worker page# yaml-language-server: $schema=../../schema/component.schema.json # Microsoft Entra Connect Sync: the on-premises synchronization engine that projects Active Directory users, # groups and password hashes into Microsoft Entra ID ("What is Microsoft Entra Connect and Connect Health"). # "Microsoft Entra Connect Sync: Scheduler" states the built-in scheduler runs a synchronization cycle every # 30 minutes by default and keeps operation logs for 7 days. The overview page states Microsoft Entra Cloud # Sync is the future of synchronization and replaces Microsoft Entra Connect; no retirement date is given. schemaVersion: "1" type: "component" id: "azure-entra-connect-sync" kind: "worker" provider: "azure" docs: "https://learn.microsoft.com/en-us/entra/identity/hybrid/connect/whatis-azure-ad-connect" aliases: ["Azure AD Connect"] defaults: trigger: "schedule" managed: false properties: syncIntervalMinutes: type: "integer" default: 30 purgeRunHistoryDays: type: "integer" default: 7 signInMethod: type: "enum" values: ["password-hash-sync", "pass-through-authentication", "federation"] stagingMode: type: "boolean"