What is federation with Microsoft Entra ID? - Microsoft Entra ID
By omondiatieno
Archived: 2026-04-05 19:47:44 UTC
Federation is a collection of domains that have established trust. The level of trust may vary, but typically includes
authentication and almost always includes authorization. A typical federation might include several organizations
with established trust for shared access to a set of resources.
You can federate your on-premises environment with Microsoft Entra ID and use this federation for authentication
and authorization. This sign-in method ensures that all user authentication occurs on-premises. This method
allows administrators to implement more rigorous levels of access control. Federation with AD FS and
PingFederate is available.
Federated identity
Tip
If you decide to use Federation with Active Directory Federation Services (AD FS), you can optionally set up
password hash synchronization as a backup in case your AD FS infrastructure fails.
Next Steps
What is hybrid identity?
What is Microsoft Entra Connect and Connect Health?
What is password hash synchronization?
What is federation?
What is single-sign on?
How federation works
Federation with PingFederate
Source: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
https://docs.microsoft.com/en-us/azure/active-directory/hybrid/whatis-fed
Page 1 of 1