
We show you how to install Azure AD Connect on this instance later. Joined an Amazon EC2 for Windows Server instance to the AWS Managed Microsoft AD domain you will use as your Azure AD Connect server.Created an AWS Managed Microsoft AD directory.They also assume you completed the following tasks: The instructions in this post assume that you understand how to create Amazon Elastic Compute Cloud (Amazon EC2) for Windows Server instances and how to use Remote Desktop Protocol (RDP) to log in to the instances. Use an AWS Managed Microsoft AD user account to sign in to Office 365.Install and configure Azure AD Connect Pass-through Authentication with AWS Managed Microsoft AD.Configure the AWS security group rules for your Azure AD Connect server.Delegate permissions to your Active Directory Domain Services (AD DS) Connector account.We then show you how to enable Azure AD Connect PTA to automatically authenticate users directly against your AWS Managed Microsoft AD directory. We explain how to use Azure AD Connect to synchronize users from AWS Managed Microsoft AD into Azure AD. In the new model, when users sign in to Office 365, Azure AD PTA validates their passwords against AWS Managed Microsoft AD directly. While AWS continues to support this model, the focus of this post is to explain a new, supported model that produces the same result without deploying a federation or password synchronization implementation. AWS did this by deploying Azure AD Connect and Active Directory Federation Services for Windows Server 2016 (AD FS 2016) with AWS Managed Microsoft AD.

Previously, AWS enabled you to access Office 365 with credentials that you manage in AWS Managed Microsoft AD. It also helps you meet your organization’s security standards because you can continue to apply and manage stronger password policies using AWS Managed Microsoft AD. Azure AD PTA reduces management overhead by eliminating the need to deploy and manage complex federation or password synchronization infrastructure.

This makes it easier to configure Microsoft Office 365 with AWS Managed Microsoft AD.

In this post, we explain how you can use AWS Directory Service for Microsoft Active Directory (AWS Managed Microsoft AD) to enable your users to access Microsoft Office 365 without synchronizing passwords using Azure Active Directory (Azure AD) Pass-through Authentication (PTA).
