For most organizations that just want to enable user sign-in to %BRAND_OFFICE_365_SHORT%, SaaS applications, and other % ...

For most organizations that just want to enable user sign-in to %BRAND_OFFICE_365_SHORT%, SaaS applications, and other %BRAND_AZURE_ACTIVE_DIRECTORY%-based resources, the default password synchronization option is recommended. Some organizations that are unable to use this option can choose either a federated sign-in option, like AD FS, or pass-through authentication. The table below helps you to make the right choice.