How does this work for a hybrid setup where Active Directory Users with Entra Connect Sync are synced to Entra?

Question

Is there a comparison between the OnPrem user object and Entra user object in the built-in condition? Which determines the most recent inactivity from both environments. Or should a choice be made between the OnPrem domain or Entra based on the Activity scope?

Answer 1

Hello,

If you mean the If is inactive for <period> condition, it only checks the target account. It means that if the target account belongs to on-premises AD, the corresponding Microsoft Entra account is never checked. The feature will be present in the next major release.