It\'s an on prem software that sits behind firewall
Communicates with AD over LDAP(s) and communicates to Salesforce over HTTPs.
Unable to run more than one instance on the same server, if you want to support multiple test environments on single machine then need to use external DBs
CAN be used to connect and manage multiple SFDC orgs with one AD.
Used only to a single AD domain.
If need multiple AD\'s then you can use the Global Catalog which then Identity Connect would use.
Can use multiple Identity Connect servers to connect to 1 SFDC org
High-Availability Clusters - Can use to mitigate risks of lost when primary server goes down.
Identity Connect is installed in DMZ in order to allow external users to access Salesforce without being on the VPN, AND allows users to log in to SFDC from mobile (otherwise they\'d have to be on mobile VPN)
Sync can be both live and scheduled and connects via REST.

TA and SA