Hi, i am bit noob in AD so pls bear with me.
Background: Company abc.com currently has On-prem AD in place, and also ADFS with Azure AD (without password hashing).
In Azure AD portal, the federation is enable for domain abc.com, disable seamless SSO and pass-through authentication due to security reason.
Now, the company abc.com want to introduce one new Learning & Development online system so wish to get the seamless sync all the ID from on-prem AD to new service provider directory. As we cannot install the directory sync tools, so how can we make this happen? Is it to add one more domain in federation? Thanks.