Microsoft Entra ID with Active Directory Federation Services

This article applies to Microsoft Entra ID (formerly Azure Active Directory) and Active Directory Federation Services (AD FS).

In order for Barracuda Cloud Control to successfully authenticate Microsoft Entra ID when AD FS is enabled, Microsoft Entra ID must have access to authenticate using a username/password combination. To do this, use the tool Microsoft Entra Connect.

Requirements

When configuring Microsoft Entra Connect:

Verify you are using the latest version of Microsoft Entra Connect
Set user sign-on options to either Password Hash Synchronization or Passthrough Authentication

If you do not meet these requirements, Barracuda Cloud Control cannot authenticate with Microsoft Entra ID and users will be locked out of the service.

See the Microsoft article Microsoft Entra Connect user sign-in options for more information on Microsoft Entra Connect.