Optionable Automatic Fallback from PTA to PHS
If last PTA agent fail and sync group has only invalid agents, there should be a optionable configuration to start Password Sync automatically if admin choose this for trully HA with local disaster (or internet connectivity fail down). And also, send notification when authentication endpoint will fail will be great.
David PEREIRA commented
In case of a crash of our VMWare infrastructure or network connexion, we need to have automatic failover to PHS (you already store Pass Hash…) or at least allow global admin to switch it from Azure Portal.
This is must have. Calling support when AD (and AAD Connect Server) is not online is not feasible and fast enough.