1. Entra ID is the identity provider for MSFT clouds
   1. “Azure”
   2. M365
   3. Dynamics 365
2. Entra ID is not AD in the cloud.
   1. Has flat structure/ No OUs
   2. Has administrative units
3. We can create additional tenants
4. By default it will <>.onmicrosoft.com
   1. Can create/add custom domains
5. When assigning license to groups only license applied to first level works not to members of nested groups

“Entra connect” to sync between on-prem AD and “Entra ID”
Active directory is always the source of truth.
Even if HR system is connected to Azure. Entra ID talks to on-prem to create object, which then replicates to Entra ID.

references: