locked
ADFS as Idp with Azure AD as Federation Hub RRS feed

 > 

  • Question

  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi All,

    I have researched most of the documents provided on TechNet and elsewhere, however, did not find the information required. The setup as below:

    - ADFS 3.0 Farm in High Availability using WID - Planned

    - ADFS will be configured for federation with Azure AD - Planned

    - Azure AD will be Federation hub for all third party apps, including Cloud Apps from Azure Market. - Planned

    - The existing environment has four different ADFS farms ( 2.0 to 3.0) for the single domain. All farms are configured for different applications. One ADFS farm is configured for O365 with IP-based location restrction.-

    -We have planned a new ADFS 3.0 farm with different name etc. which will federate only with Azure AD & Azure AD will have the federation with all the applications. This will be parallel installation. 

    Any insights will be helpful for the following:

    1. New ADFS federation with Azure AD without disturbing existing ADFS federation with O365.

    2. Are there any different RP configuration for Azure AD or it's same as in O365?

    3. Any changes required in AADConnect config?

    Thank you.

    Thanks, Avi

    Wednesday, October 12, 2016 12:31 PM

All replies

  • Question
    Sign in to vote
    0
    Sign in to vote

    Just a side comment here, the use of ADFS in this scenario is to maintain an SSO with domain joined clients. So if you SSO for domain joined client isn't a concern, you could even pass on ADFS all together.

    Note: Posts are provided “AS IS” without warranty of any kind, either expressed or implied, including but not limited to the implied warranties of merchantability and/or fitness for a particular purpose.

    Thursday, October 13, 2016 4:08 PM
  • Question
    Sign in to vote
    0
    Sign in to vote

    Hi Pierre,

    Thank you for your response. The requirement is to keep on-prem AD as source of authentication, Hence the ADFS requirement. And yes most users will be domain joined along with few Windows 10 devices with Azure AD join. 

    Let me know if you need further information. 

    Thanks, Avi

    Monday, October 17, 2016 6:56 AM