2 docs tagged with "architecture"

How the Defender for Identity cloud service and its sensors fit together, what the classic v2.x sensor and the MDE-integrated v3.x sensor collect on domain controllers, AD FS, AD CS and Entra Connect servers, what leaves the server, how the Directory Service Account is used, and how to size, connect and keep sensors healthy.

The tie-together mental model for this knowledge base, AD DS as the on-prem authority, Entra ID as the cloud authority, the sync bridge between them, device join as the fork that decides GPO or Intune, where each Defender product touches AD, what still needs AD in 2026, and the migration arc most clients are on.