To configure Azure AD Connect to meet the following requirements:

• User sign-ins to Azure AD must be authenticated by an Active Directory domain controller. • Active Directory domain users must be able to use Azure AD self-service password reset (SSPR).

You can use Pass-through Authentication (PTA) for the first requirement. PTA validates user credentials against your on-premises Active Directory environment without the need for complex network infrastructure or for managing a separate set of credentials in the cloud. You can find more information on how to configure PTA in the Microsoft documentation 1.

For the second requirement, you can use Password Hash Synchronization (PHS). PHS synchronizes a hash of the user’s password from your on-premises Active Directory environment to Azure AD. You can find more information on how to configure PHS in the Microsoft documentation