Microsoft Entra Connect Sync / Cloud Sync
Microsoft
Free
Live - no guest downtime
Agent
Enterprise estates
Ad
What it is good at
Cloud Sync supports multiple disconnected forests to one tenant, which is exactly the shape of an M&A estate that has not been consolidated yet.
Where it falls down
Synchronisation, not migration - it does not move SID history or re-ACL resources.
Capabilities
- Directory synchronisation
- Password migration / sync
- Coexistence during migration
- Multi-tenant / multi-forest
Cost and licensing
- Cost category
- Free — No licence cost from the vendor.
- Indicative price
- No licence cost; needs Entra ID (free tier works for basic sync)
- Licence model
- Free tooling. Password hash sync and pass-through auth work on the Entra ID Free tier; group writeback, password writeback and Entra ID Protection need Entra ID P1/P2.
- How to license it
- Download Entra Connect from Microsoft. Cloud Sync is agent-based and configured in the Entra portal. Buy Entra ID P1 only if you need writeback or conditional access.
- Lifecycle
- Current
- Vendor page
- https://learn.microsoft.com/entra/identity/hybrid/
Pricing and licensing last reviewed 2026-09-18. Indicative only - confirm with the vendor.
Supported sources
- Any platform
Supported targets
- Any platform
Scenarios it covers
- On-premises AD to Entra ID (cloud-only / Entra join)
- Hybrid identity re-platform (change sync topology)
- Multi-domain / multi-forest consolidation