HYBRID IDENTITY & ENTRA ID ARCHITECTURE

The on-premises identity store and authentication authority for all domain-joined resources. In hybrid architectures, AD DS is the source of authority for user and computer objects synchronised to Entra ID. Object hygiene, UPN suffixes, duplicate accounts, and stale objects must be resolved before any sync is enabled.