Action required: Synchronization will stop working on October 1, 2023, for any customers still running Azure AD Connect V1.

Action required: Synchronization will stop working on October 1, 2023, for any customers still running Azure AD Connect V1. Customers using Azure AD Connect cloud sync or Azure AD Connect V2 will remain fully operational with no action required. Click here to see if there are any upgrade alerts for you on the Azure AD Connect Health page.

Upgrade your AAD connect tool to the most recent version if you are still using version V1; otherwise, synchronization stops working on October 1, 2023.

The Azure Active Directory team frequently adds new features and functionalities to Azure AD Connect Health.

This article lists the versions and features that have been released.

Agent Updates

Microsoft Azure AD Connect Health ADFS Agents (versions 4.5.x)

• New version of the Azure AD Connect Health ADFS agent that uses an updated architecture.
  • Updated installer package
  • Migration to MSAL authentication library
  • New pre-requisite checks
  • Improved logging

Agent Update

Azure AD Connect Health AD DS and ADFS Health Agents (version 3.2.2256.26, Download Center Only)

• We created a fix for so that the agents would be FIPS compliant
  • the change was to have the agents use ‘CloudStorageAccount.UseV1MD5 = false’ so the agent only uses only FIPS compliant cryptography, otherwise Azure blob client causes FIPs exceptions to be thrown.
• Update of Newtonsoft.json library from 12.0.1 to 13.0.1 to resolve a component governance alert.
• In ADFS health agent, the TestADFSDuplicateSPN test was disabled as the test was unreliable, it would generate misleading alerts when server experienced transient connectivity issues.

Agent Update

• Azure AD Connect Health agent for Azure AD Connect (version 3.2.2188.23)
  • We fixed a bug where, under certain circumstances, Azure AD Connect sync errors were not getting uploaded or shown in the portal.

Agent Update

• Azure AD Connect Health agent for AD FS (version 3.1.113.0)
  • Fix to extract device information such as device compliance and managed status, device OS, and device OS version from AD FS audits in certain device based authentication scenarios.
  • Fix to populate OAuth Application info in failure cases and categorizing OAuth failures with more specific error codes
  • Fix for alerts on broken WMI calls on the customer machine. Now such calls the result/status would be set to “notRun”.

Agent Update

• Azure AD Connect Health agent for AD FS (version 3.1.99.0)
  • Fix for low unique user count value in AD FS application activity report
  • Fix for sign-ins with empty or default GUID CorrelationId

Agent Update

• Azure AD Connect Health agent for AD FS (version 3.1.95.0)
  • Fix to resolve NT4 formatted username to a UPN during sign-in events.
  • Fix to identify incorrect application identifier scenarios with a dedicated error code.
  • Changes to add a new property for OAuth client identifier.
  • Fix to display correct values in the Protocol and Authentication Type fields in Azure AD Sign-In Report for certain sign-in scenarios.
  • Fix to display IP addresses in Azure AD Sign-In Report’s IP chain field in order of the request.
  • Changes to introduce a new field to differentiate if secondary authentication was requested during a sign-in.
  • Fix for AD FS application identifier property to display in Azure AD Sign-In Report.

Agent Update

• Azure AD Connect Health agent for AD FS (version 3.1.77.0)
  • Bug fix for “Invalid Service Principal Name (SPN) for AD FS service” alert, for which the alert was reporting incorrectly.

Agent Update

• Azure AD Connect Health agent for AD FS (version 3.1.59.0)
  1. Text change in TestWindowsTransport
  2. Changes for AD FS RP upload
• Azure AD Connect Health agent for AD FS (version 3.1.56.0)
  1. Add TestWindowsTransport test and remove WsTrust endpoints checks in CheckOffice365Endpoints test
  2. Log OS and .NET information
  3. Increase RP configuration message upload size to 1MB.
  4. Bug fixes
• Azure AD Connect Health agent for AD DS (version 3.1.56.0)
  1. Log OS and .NET information
  2. Bug fixes

Agent Update:

• Azure AD Connect Health agent for AD FS (version 3.1.51.0)
  1. Bug fix to distinguish between multiple sign ins that share the same client-request-id.
  2. Bug fix to parse bad username/password errors on language localized servers.

Agent Update:

• Azure AD Connect Health agent for AD FS (version 3.1.46.0)
  1. Fix Check Duplicate SPN alert process for ADFS

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.1.41.0)
  1. .NET version collection
  2. Improvement of performance counter collection when missing certain categories
  3. Bug fix on preventing spawning of multiple Monitoring Agent instances
• Azure AD Connect Health agent for AD FS (version 3.1.41.0)
  1. Integrate and upgrade of AD FS test scripts using ADFSToolBox
  2. Implement .NET version collection
  3. Improvement of performance counter collection when missing certain categories
  4. Bug fix on preventing spawning of multiple Monitoring Agent instances

New GA features:

• Azure AD Connect Health for Sync – Diagnose and remediate duplicated attribute sync errors from the portal

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.1.24.0)
  1. Transport Layer Security (TLS) protocol version 1.2 compliance and enforcement
  2. Reduce Global Catalog alert noise
  3. Health agent registration bug fixes
• Azure AD Connect Health agent for AD FS (version 3.1.24.0)
  1. Transport Layer Security (TLS) protocol version 1.2 compliance and enforcement
  2. Support of Test-ADFSRequestToken for localized operating system
  3. Solved diagnostic agent EventHandler locking issue
  4. Health agent registration bug fixes

• Azure AD Connect Health agent for Sync (version 3.1.7.0) released with Azure AD Connect version 1.1.880.0
  1. Hotfix for high CPU issue of monitoring agent with .NET Framework KB releases

New preview features:

• Azure AD Connect Health for Sync – Diagnose and remediate duplicated attribute sync errors from the portal

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.1.7.0)
  1. Hotfix for high CPU issue of monitoring agent with .NET Framework KB releases
• Azure AD Connect Health agent for AD FS (version 3.1.7.0)
  1. Hotfix for high CPU issue of monitoring agent with .NET Framework KB releases
  2. Test results fixes on ADFS Server 2016 secondary server
• Azure AD Connect Health agent for AD FS (version 3.1.2.0)
  1. Hotfix for agent memory management and related alerts specifically for version 3.0.244.0

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.0.244.0)
  1. Agent privacy improvement
  2. Bug fixes and general improvements
• Azure AD Connect Health agent for AD FS (version 3.0.244.0)
  1. Agent Diagnostics Service and related PowerShell module improvements
  2. Agent privacy improvement
  3. Bug fixes and general improvements
• Azure AD Connect Health agent for Sync (version 3.0.164.0) released with Azure AD Connect version 1.1.819.0
  1. Agent privacy improvement
  2. Bug fixes and general improvements

New preview features:

• Azure AD Connect Health for AD FS – Risky IP report and alert.

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.0.176.0)
  1. Agent availability improvements
  2. Bug fixes and general improvements
• Azure AD Connect Health agent for AD FS (version 3.0.176.0)
  1. Agent availability improvements
  2. Bug fixes and general improvements
• Azure AD Connect Health agent for Sync (version 3.0.129.0) released with Azure AD Connect version 1.1.750.0
  1. Agent availability improvements
  2. Bug fixes and general improvements

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.0.145.0)
  1. Agent availability improvements
  2. Added new agent troubleshooting commands
  3. Bug fixes and general improvements
• Azure AD Connect Health agent for AD FS (version 3.0.145.0)
  1. Added new agent troubleshooting commands
  2. Agent availability improvements
  3. Bug fixes and general improvements

Agent Update:

• Azure AD Connect Health agent for Sync (version 3.0.129.0) released with Azure AD Connect version 1.1.649.0Fixed a version compatibility issue between Azure AD Connect and Azure AD Connect Health Agent for Sync. This issue affects customers who are performing Azure AD Connect in-place upgrade to version 1.1.647.0, but currently has Health Agent version 3.0.127.0. After the upgrade, the Health Agent can no longer send health data about Azure AD Connect Synchronization Service to Azure AD Health Service. With this fix, Health Agent version 3.0.129.0 is installed during Azure AD Connect in-place upgrade. Health Agent version 3.0.129.0 does not have compatibility issue with Azure AD Connect version 1.1.649.0.

Agent Update:

• Azure AD Connect Health agent for AD DS (version 3.0.68.0)
  1. Bug fixes and general improvements
  2. Sovereign cloud support
• Azure AD Connect Health agent for AD FS (version 3.0.68.0)
  1. Bug fixes and general improvements
  2. Sovereign cloud support
• Azure AD Connect Health agent for Sync (version 3.0.68.0) released with Azure AD Connect version 1.1.614.0
  1. Support for Microsoft Azure Government Cloud and Microsoft Cloud Germany

Agent Update:

• Azure AD Connect Health agent for AD FS (version 3.0.12.0)
  1. Bug fixes and general improvements
• Azure AD Connect Health agent for AD DS (version 3.0.12.0)
  1. Performance counters upload improvements
  2. Bug fixes and general improvements

Agent Update:

• Azure AD Connect Health agent for AD FS (version 2.6.408.0)
• Improvements in detecting client IP addresses in authentication requests
• Bug Fixes related to Alerts
• Azure AD Connect Health agent for AD DS (version 2.6.408.0)
• Bug fixes related to Alerts.
• Azure AD Connect Health agent for Sync (version 2.6.353.0) released with Azure AD Connect version 1.1.281.0
• Provide the required data for the Synchronization Error Reports
• Bug fixes related to Alerts

New preview features:

• Synchronization Error Reports for Azure AD Connect

New features:

• Azure AD Connect Health for AD FS – IP address field is available in the report about top 50 users with bad username/password.

New preview features:

• Azure AD Connect Health for AD DS.

Agent Update:

• Azure AD Connect Health agent for AD FS (version 2.6.91.1512)

New features:

• Test Connectivity Tool for Azure AD Connect Health Agents

New features:

• Support for Azure role-based access control (Azure RBAC)

New preview features:

• Azure AD Connect Health for sync.

Fixed issues:

• Bug fixes for errors seen during agent registrations.

New features:

• Wrong Username password report for AD FS
• Support to configure Unauthenticated HTTP Proxy
• Support to configure agent on Server core
• Improvements to Alerts for AD FS
• Improvements in Azure AD Connect Health Agent for AD FS for connectivity and data upload.

Fixed issues:

• Bug fixes in Usage Insights for AD FS Error types.

Initial release of Azure AD Connect Health for AD FS and AD FS Proxy.

New features:

• Alerts for monitoring AD FS and AD FS Proxy servers with email notifications.
• Easy access to AD FS topology and patterns in AD FS Performance Counters.
• Trend in successful token requests on AD FS servers grouped by Applications, Authentication Methods, Request Network Location etc.
• Trends in failed request on AD FS servers grouped by Applications, Error Types etc.
• Simpler Agent Deployment using Azure AD Global Administrator credentials.