Microsoft Entra ID (Microsoft Entra ID) Pass-through Authentication allows your users to sign in to both on- premises and cloud-based applications using the same passwords. This feature is an alternative to Microsoft Entra ID Password Hash Synchronization, which provides the same benefit of cloud authentication to organizations. However, certain organizations wanting to enforce their on- premises Active Directory security and password policies, can choose to use Pass-through Authentication instead. Note: Microsoft Entra ID (Microsoft Entra ID) self-service password reset (SSPR) lets users reset their passwords in the cloud, but most companies also have an on-premises Active Directory Domain Services (AD DS) environment for users. Password writeback allows password changes in the cloud to be written back to an on-premises directory in real time by using either Microsoft Entra Connect Sync or Microsoft Entra Cloud Sync. When users change or reset their passwords using SSPR in the cloud, the updated passwords also written back to the on-premises AD DS environment. Password writeback is supported in environments that use the following hybrid identity models: Password hash synchronization Pass-through authentication Active Directory Federation Services Reference: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-pta https://docs.microsoft.com/en-us/azure/active-directory/authentication/concept-sspr-writeback