Which identity option allows AD DS users to access Azure Virtual Desktop with minimal infrastructure changes?

The choice of pass-through authentication is ideal for allowing Active Directory Domain Services (AD DS) users to access Azure Virtual Desktop with minimal infrastructure changes. This authentication method enables users to sign in using their existing on-premises credentials without the need for additional infrastructure or synchronization of passwords to the cloud.

Pass-through authentication works by allowing user authentication requests to be forwarded directly to the on-premises Active Directory. This means that when users log in to Azure Virtual Desktop, their credentials are validated against the on-premises directory, providing a seamless experience that reduces the complexity associated with managing user identities across multiple environments.

Additionally, pass-through authentication does not require the implementation of complex federation setups or the management of additional infrastructure components. This simplicity is a significant advantage for organizations looking to minimize overhead and streamline their identity management processes while still leveraging their existing Active Directory for user authentication.

In contrast, other options involve deeper changes to organizational infrastructure. Active Directory Federation Services (AD FS) requires setting up a federation service that can complicate the configuration and management process. Cloud-only identity establishes a separate identity store in the cloud, which may not be suitable for organizations that prefer to maintain their credentials on-premises. Lastly, password hash synchronization involves an initial synchronization process that sends password hashes from