Your on-premises network contains an Active Directory domain.

You have a Microsoft 365 subscription.

You need to sync the domain with the subscription. The solution must meet the following requirements:

• On-premises Active Directory password complexity policies must be enforced.

• Users must be able to use Microsoft Entra Self-Service Password Reset (SSPR).

What should you use?