This forum has migrated to Microsoft Q&A. Visit Microsoft Q&A to post new questions.

Remove From My Forums

How to remove ADFS 2016 - Azure (cloud) MFA link

Question
0

Sign in to vote

I have found two clear and similar posts on how to set up Azure cloud MFA with ADFS 2016.

https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/operations/configure-ad-fs-2016-and-azure-mfa

https://blog.kloud.com.au/2017/01/24/adfs-v-3-0-2012-r2-migration-to-adfs-4-0-2016-mfa-part-3/$

How do you undo these processes?

Specifically

3. remove the tenant ID association created with Set-AdfsAzureMfaTenant -TenantId <tenant ID> -ClientId 981f26a1-7f43-403b-a875-f8b09b8cd720

2. remove the credential created using New-MsolServicePrincipalCredential -AppPrincipalId 981f26a1-7f43-403b-a875-f8b09b8cd720 -Type asymmetric -Usage verify -Value $certBase64

3. remove a the certificate created with New-AdfsAzureMfaTenantCertificate

Since this is only a 3 step process I guess if it fails it is easier to start again than try and debug.

CarolChi

Wednesday, May 31, 2017 1:13 PM

All replies

0

Sign in to vote

No quick answer is forthcoming so I am working it out:

Remove the credential

Find your TenantID : Install-Module AzureRM : login-AzureRMAccount

Find the KeyID : Get-MsolServicePrincipalCredential -AppPrincipalId 981f26a1-7f43-403b-a875-f8b09b8cd720 and put * in ReturnKeyValues

Remove the MsolServicePrincipalCredential :

Remove-MsolServicePrincipalCredential -KeyIds @("keyID you found above") -TenantID yourTenantID -AppPrincipalId 981f26a1-7f43-403b-a875-f8b09b8cd720

Check which certificate you are using

New-AdfsAzureMfaTenantCertificate -TenantID yourTenantID | outfile mycert.cer

Use the certificate snapin to remove the certificate on the ADFS farm.

Not found out how to remove it in Azure yet.

CarolChi

Wednesday, May 31, 2017 3:58 PM