RS COMPONENTS HOW TO

Port 443 is used for all authenticated outbound communication.

You don't need to open inbound ports on your firewall.

Only standard ports (port 80 and port 443) are used for outbound communication from the authentication agents to Azure AD.

As a best practice, treat all servers that are running authentication agents as Tier 0 systems (see reference). There's no requirement to install these authentication agents in a perimeter network (also known as DMZ, demilitarized zone, and screened subnet).

On-premises authentication agents that listen for and respond to password validation requests make only outbound connections from within your network.

On-premises passwords are never stored in the cloud in any form.

It's built on a secure multi-tenanted architecture that provides isolation of sign-in requests between tenants.

Pass-through authentication has these key security capabilities: Pass-through authentication key security capabilities

RS COMPONENTS HOW TO

Detailed technical information about how to keep the authentication agents operationally secure.The security of the channels between on-premises authentication agents and Azure AD.Detailed technical information about password encryption during user sign-in.

Detailed technical information about how to install and register authentication agents.This article is for security and IT administrators, chief compliance and security officers, and other IT professionals who are responsible for IT security and compliance at organizations or enterprises of any size. It focuses on the security aspects of the feature.

This article provides a more detailed description of how Azure Active Directory (Azure AD) pass-through authentication works.

Rs components