📖 What is Microsoft Entra ID Connect Health?
Microsoft Entra ID Connect Health is a monitoring service that provides insights into the health of identity synchronization and federation infrastructure. It helps administrators identify and resolve synchronization errors and connectivity issues between on-premises Active Directory and the cloud.
"Focus on the 'Sync Errors' dashboard. This is the primary location for diagnosing why specific users or groups are not synchronizing from on-premises to the cloud."
📚 Certification: Microsoft 365 Administrator (MS-102)
🔑 What are the Key Concepts of Microsoft Entra ID Connect Health?
- ▸ Sync Errors Dashboard: The primary tool for identifying specific synchronization failures, such as duplicate proxy addresses or invalid attribute characters for users and groups.
- ▸ Federation Monitoring: Tracks the health and availability of AD FS infrastructure, providing critical alerts for connectivity issues and certificate expiration dates.
- ▸ Proactive Alerting: Notifies administrators of critical identity infrastructure issues via email or portal notifications before they impact the end-user experience.
- ▸ Agent-Based Telemetry: Utilizes specialized health agents installed on on-premises servers to push performance and error data to the Microsoft Entra portal.
- ▸ Remediation Guidance: Provides specific error codes and actionable steps within the portal to help administrators resolve identity synchronization conflicts quickly.
🎯 How does Microsoft Entra ID Connect Health appear on the MS-102 Exam?
A scenario might describe several users failing to sync from on-premises Active Directory to the cloud; you will be asked to identify the Sync Errors dashboard as the primary diagnostic tool.
You may be asked to determine the most efficient way to monitor the health and availability of an on-premises AD FS farm used for identity federation.
Expect questions where you must distinguish between using the local Synchronization Service Manager for real-time logs and Entra ID Connect Health for cloud-based monitoring.
❓ Frequently Asked Questions
Does Entra ID Connect Health replace the Synchronization Service Manager?
No, it complements it. While Health provides high-level dashboards and alerting in the cloud, the Synchronization Service Manager is still required for deep-dive, real-time local log analysis on the sync server.
Can I resolve synchronization errors directly from the Health portal?
No, the portal identifies the errors and provides the necessary guidance, but the actual remediation, such as fixing a duplicate UPN, must be performed within the on-premises Active Directory.
How does federation health monitoring differ from sync health monitoring?
Sync health focuses on object attribute consistency and flow between directories, whereas federation health monitors the actual authentication traffic and server availability of the AD FS infrastructure.