{"id":1260,"date":"2018-02-13T09:38:45","date_gmt":"2018-02-13T07:38:45","guid":{"rendered":"https:\/\/msb365.abstergo.ch\/?p=1260"},"modified":"2023-06-23T13:16:29","modified_gmt":"2023-06-23T11:16:29","slug":"configuring-adfs-office-365","status":"publish","type":"post","link":"https:\/\/www.msb365.blog\/?p=1260","title":{"rendered":"Configuring ADFS for Office 365"},"content":{"rendered":"<p>Almost everyone is using Cloud services, there are a lot of them like Azure, Office 365, G-Suite, Dropbox, AWS.<br \/>\nSome of them we are using for private, but the most of it for our daily business.<br \/>\nThere is a smooth way Microsoft offers us to be able to use single sign-on (SSO) on the most of the cloud services.<\/p>\n<p>SSO means that the users can use\u00a0their\u00a0windows credentials once they log in to their workstation or notebook. After this login the user\u00a0doesn\u2019t need\u00a0to enter his credentials for other services, as\u00a0an example, if\u00a0the company is running a RADIUS server, the user will be logged in to the WLAN automatically.<\/p>\n<p>In our case I want to write about SSO with Office 365.<br \/>\nWhy this is needed?<br \/>\nWell, if we want to use services from Office 365 like exchange online, One Drive, SharePoint, etc. we have to make a sign into the Office Portal.<br \/>\n<img fetchpriority=\"high\" decoding=\"async\" class=\"alignnone size-full wp-image-1284\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0.png\" alt=\"\" width=\"1558\" height=\"970\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0.png 1558w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0-300x187.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0-768x478.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0-1024x638.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0-600x374.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/0-780x486.png 780w\" sizes=\"(max-width: 1558px) 100vw, 1558px\" \/><\/p>\n<p>To get here, the user needs simply to enter the URL <a href=\"https:\/\/portal.office.com\" target=\"_blank\" rel=\"noopener\"><strong>https:\/\/portal.office.com<\/strong><\/a> in his browser and it will point him to the right place, thanks to the ADFS there are no further logins needed.<\/p>\n<p>So how ADFS works?<\/p>\n<p>The User can use his company workstation or any other private device. If he is using his company workstation he will have to log-in with his company domain credentials to the workstation. If he uses a private computer and he want access the company environment, he will have to make once an authentication to the company environment (across the ADFS) and after that he will be able, to use all features.<\/p>\n<p>In this graphic I want to show how the authentication progress works:<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1262\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4.png\" alt=\"\" width=\"1316\" height=\"995\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4.png 1316w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4-300x227.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4-768x581.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4-1024x774.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4-600x454.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/1-4-780x590.png 780w\" sizes=\"(max-width: 1316px) 100vw, 1316px\" \/><\/p>\n<p><a href=\"https:\/\/vimeo.com\/user5229826\" target=\"_blank\" rel=\"noopener\">Steve Plank<\/a> has made a simple explanation video about how the progress with ADFS works. So if you need additional information about it, check out his video here:<\/p>\n<p>\u00a0<\/p>\n<p><iframe src=\"https:\/\/player.vimeo.com\/video\/19177993\" width=\"640\" height=\"420\" frameborder=\"0\" allowfullscreen=\"allowfullscreen\"><\/iframe><\/p>\n<p><a href=\"https:\/\/vimeo.com\/19177993\">How ADFS and the Microsoft Federation Gateway work together up in the Office 365 Cloud.<\/a><\/p>\n<p>\u00a0<\/p>\n<h4>AD FS Requirements<\/h4>\n<p>I could list you here all requirements, you need to know for ADFS, but there is a good article in the Microsoft Pro Center. So simply follow this <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-fs\/overview\/ad-fs-requirements\" target=\"_blank\" rel=\"noopener\"><strong>LINK.<\/strong><\/a><\/p>\n<p>\u00a0<\/p>\n<h4>Migrate ADFS<\/h4>\n<p>The most of you knew some information about ADFS even before this article, but how about migrating ADFS from a Windows server 2012 to a news windows server 2016?<br \/>\nHere the steps about it:<\/p>\n<p><span style=\"color: #ff00ff;\">(The following chapter is an original Microsoft article! If you want to see the original article, simply follow the <a style=\"color: #ff00ff;\" href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-fs\/deployment\/upgrading-to-ad-fs-in-windows-server\" target=\"_blank\" rel=\"noopener\"><strong>LINK<\/strong> <\/a>for more)<\/span><\/p>\n<p><strong>NOTE:<\/strong> Before you can move to AD FS on Windows server 2016, you need to remove all Windows 2012 R2 nodes! An upgrade from a Windows server 2012 R2 to Windows server 2016 is not possible as a solution way to become a 2016 node.<\/p>\n<p>Using Server Manager install the Active Directory Federation Services Role on the Windows Server 2016<\/p>\n<p>Using the AD FS Configuration wizard, join the new Windows Server 2016 server to the existing AD FS farm.<\/p>\n<p><img decoding=\"async\" class=\"alignnone size-full wp-image-1268\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-2.png\" alt=\"\" width=\"764\" height=\"564\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-2.png 764w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-2-300x221.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/2-2-600x443.png 600w\" sizes=\"(max-width: 764px) 100vw, 764px\" \/><\/p>\n<p>On the Windows Server 2016 federation server, open AD FS management. Note that nothing is showing up as this federation server is not the primary server.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1269\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2.png\" alt=\"\" width=\"1010\" height=\"728\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2.png 1010w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2-300x216.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2-768x554.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2-600x432.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/3-2-780x562.png 780w\" sizes=\"(max-width: 1010px) 100vw, 1010px\" \/><\/p>\n<p>\u00a0<\/p>\n<p>Once the join is complete, on the Windows Server 2016 server, open PowerShell and run the following cmdlt:<\/p>\n<pre class=\"\">Set-AdfsSyncProperties -Role PrimaryComputer<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1270\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2.png\" alt=\"\" width=\"858\" height=\"640\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2.png 858w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2-300x224.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2-768x573.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2-600x448.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/4-2-780x582.png 780w\" sizes=\"(max-width: 858px) 100vw, 858px\" \/><\/p>\n<p>On the original AD FS Windows Server 2012 R2 server, open PowerShell and run the following cmdlet:<\/p>\n<pre class=\"\">Set-AdfsSyncProperties -Role SecondaryComputer -PrimaryComputerName {FQDN}<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1271\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2.png\" alt=\"\" width=\"878\" height=\"654\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2.png 878w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2-300x223.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2-768x572.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2-600x447.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-2-780x581.png 780w\" sizes=\"(max-width: 878px) 100vw, 878px\" \/><\/p>\n<p>On your Web Application Proxy open PowerShell and run the followoing cmdlt:<\/p>\n<pre class=\"\">Install-WebApplicationProxy -CertificateThumbprint {SSLCert} -fsname fsname -TrustCred $trustcred<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1272\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1.png\" alt=\"\" width=\"1441\" height=\"793\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1.png 1441w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1-300x165.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1-768x423.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1-1024x564.png 1024w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1-600x330.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/5-1-1-780x429.png 780w\" sizes=\"(max-width: 1441px) 100vw, 1441px\" \/><\/p>\n<p>Now on the Windows Server 2016 federation server open AD FS Management. Note that now all of the nodes appear because the primary role has been transferred to this server.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1273\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2.png\" alt=\"\" width=\"1010\" height=\"730\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2.png 1010w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2-300x217.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2-768x555.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2-600x434.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/6-2-780x564.png 780w\" sizes=\"(max-width: 1010px) 100vw, 1010px\" \/><\/p>\n<p>\u00a0<\/p>\n<p>With the Windows Server 2016 installation media, open a command prompt and navigate to support\\adprep directory. Run the following:<\/p>\n<pre class=\"\">adprep \/forestprep<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1274\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1.png\" alt=\"\" width=\"978\" height=\"516\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1.png 978w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1-300x158.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1-768x405.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1-600x317.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/7-1-780x412.png 780w\" sizes=\"(max-width: 978px) 100vw, 978px\" \/><\/p>\n<p>Once that completes run:<\/p>\n<pre class=\"\">adprep\/domainprep<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1275\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1.png\" alt=\"\" width=\"976\" height=\"516\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1.png 976w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1-300x159.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1-768x406.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1-600x317.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/8-1-780x412.png 780w\" sizes=\"(max-width: 976px) 100vw, 976px\" \/><\/p>\n<p>Now on the Windows Server 2016 Server open PowerShell and run the following cmdlet:<\/p>\n<pre class=\"\">Invoke-AdfsFarmBehaviorLevelRaise<\/pre>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1276\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4.png\" alt=\"\" width=\"858\" height=\"394\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4.png 858w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4-300x138.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4-768x353.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4-600x276.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/9-4-780x358.png 780w\" sizes=\"(max-width: 858px) 100vw, 858px\" \/><\/p>\n<p>When prompted, type Y. This will begin raising the level. Once this completes you have successfully raised the FBL.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1277\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1.png\" alt=\"\" width=\"860\" height=\"620\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1.png 860w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1-300x216.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1-768x554.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1-600x433.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/10-1-780x562.png 780w\" sizes=\"(max-width: 860px) 100vw, 860px\" \/><\/p>\n<p>Now, if you go to AD FS Management, you will see the new nodes that have been added for AD FS in Windows Server 2016<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1278\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1.png\" alt=\"\" width=\"1000\" height=\"471\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1.png 1000w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1-300x141.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1-768x362.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1-600x283.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/11-1-780x367.png 780w\" sizes=\"(max-width: 1000px) 100vw, 1000px\" \/><\/p>\n<p>Likewise, you can use the PowerShell cmdlt:<\/p>\n<pre class=\"\">Get-AdfsFarmInformation<\/pre>\n<p>to show you the current FBL.<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1279\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1.png\" alt=\"\" width=\"1004\" height=\"291\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1.png 1004w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1-300x87.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1-768x223.png 768w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1-600x174.png 600w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/12-1-780x226.png 780w\" sizes=\"(max-width: 1004px) 100vw, 1004px\" \/><\/p>\n<p>\u00a0<\/p>\n<h4>Personalization your ADFS<\/h4>\n<p>After setting up your ADFS environment, you also have the opportunity to make some customization on it.<br \/>\nIf you keep it default, it will look like this example:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1280\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/13-1.png\" alt=\"\" width=\"675\" height=\"445\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/13-1.png 675w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/13-1-300x198.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/13-1-600x396.png 600w\" sizes=\"(max-width: 675px) 100vw, 675px\" \/><\/p>\n<p>There is a bulk of things we can customize in a very easy way\u2026<\/p>\n<p>\u00a0<\/p>\n<p>We are able to change the following things by an easy PowerShell command:<\/p>\n<ul>\n<li>Illustration Logo<\/li>\n<li>Company Logo<\/li>\n<li>Login Texts<\/li>\n<li>Company Name<\/li>\n<li>Help Desk Link<\/li>\n<li>Home Link<\/li>\n<li>Privacy Link<\/li>\n<li>Support Mail address<\/li>\n<\/ul>\n<p>Before we can start to change all this thinks, there is a little preparation needed\u2026<\/p>\n<p>We need to define a path, where our Logo and Illustration is located. In my example for the following PowerShell commands, I will use this path: C:\\DrPe\\<\/p>\n<p>As second point we need to prepare our Logo and Illustration. Here we need to know the following things:<\/p>\n<p>Size for Illustration:<\/p>\n<p>1420\u00d71080 pixels @ 96 DPI with a file size of no greater than 200 KB<\/p>\n<p>\u00a0<\/p>\n<p>Size of the Company Logo:<\/p>\n<p>260\u00d735 @ 96 dpi with a file size of no greater than 10 KB<\/p>\n<p>\u00a0<\/p>\n<p>When all this is prepared, we can start customize our AFDS:<\/p>\n<pre class=\"\">#Change Illustration\r\nSet-AdfsWebTheme -TargetName default -Illustration @{path=\"C:\\DrPe\\illustration.png\"}\r\n\r\n#Change Company Logo\r\nSet-AdfsWebTheme -TargetName default -Logo @{path=\"C:\\DrPe\\logo.png\"}\r\n\r\n# Change sign-in page description\r\nSet-AdfsGlobalWebContent -SignInPageDescriptionText \"<p>Keep it simple but significant.<\/p> <p>Click <A href='https:\/\/www.msb365.blog'>here<\/A> for more information.<\/p>\"\r\n\r\n# Change Company Name\r\nSet-AdfsGlobalWebContent \u2013CompanyName \u201cMSB 365 | The Microsoft Blog\u201d\r\n\r\n# Add Help Desk Link\r\nSet-AdfsGlobalWebContent -HelpDeskLink https:\/\/msb365.abstergo.ch\/?page_id=54 -HelpDeskLinkText Help\r\n \r\n# Add Home Link\r\nSet-AdfsGlobalWebContent -HomeLink https:\/\/www.msb365.blog -HomeLinkText Home\r\n \r\n# Add Privacy Link\r\nSet-AdfsGlobalWebContent -PrivacyLink https:\/\/msb365.abstergo.ch\/?page_id=47 -PrivacyLinkText Privacy\r\n \r\n# Customize a support email error message\r\nSet-AdfsGlobalWebContent \u2013ErrorPageSupportEmail \"info@contoso.com\"<\/pre>\n<p>After we have done all configurations, your Screen could look like this one:<\/p>\n<p><img loading=\"lazy\" decoding=\"async\" class=\"alignnone size-full wp-image-1281\" src=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/14-1.png\" alt=\"\" width=\"650\" height=\"429\" srcset=\"https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/14-1.png 650w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/14-1-300x198.png 300w, https:\/\/msb365.abstergo.ch\/wp-content\/uploads\/2018\/02\/14-1-600x396.png 600w\" sizes=\"(max-width: 650px) 100vw, 650px\" \/><span style=\"color: #993300;\">\u00a0(Orginal Picture and more information about customization <a href=\"https:\/\/docs.microsoft.com\/en-us\/windows-server\/identity\/ad-fs\/operations\/ad-fs-user-sign-in-customization\" target=\"_blank\" rel=\"noopener\"><strong>HERE<\/strong><\/a>)<\/span><\/p>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n<p>In this place, you have all needed information\u2019s about ADFS. I hope this article could help you by configuring your environment, if you are also interested in Multi ADFS Forrest\u2019s, I can recommend my other article in my blog here: <a href=\"https:\/\/www.msb365.blog\/?p=167\">https:\/\/www.msb365.blog\/?p=167<\/a><\/p>\n<p>I also can highly recommend you the Microsoft Link <a href=\"https:\/\/docs.microsoft.com\/en-us\/azure\/architecture\/reference-architectures\/identity\/adfs\" target=\"_blank\" rel=\"noopener\"><strong>HERE<\/strong><\/a> about extending ADFS to Azure.<\/p>\n<p>\u00a0<\/p>\n<p>\u00a0<\/p>\n<p>Photo by\u00a0<a href=\"https:\/\/unsplash.com\/photos\/Sj0iMtq_Z4w?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText\">Chang Duong<\/a>\u00a0on\u00a0<a href=\"https:\/\/unsplash.com\/search\/photos\/group?utm_source=unsplash&utm_medium=referral&utm_content=creditCopyText\">Unsplash<\/a><\/p>\n","protected":false},"excerpt":{"rendered":"<p>Almost everyone is using Cloud services, there are a lot of them like Azure, Office 365, G-Suite, Dropbox, AWS. Some of them we are using for private, but the most of it for our daily business. There is a smooth way Microsoft offers us to be able to use single sign-on (SSO) on the most [&hellip;]<\/p>\n","protected":false},"author":1,"featured_media":3119,"comment_status":"open","ping_status":"open","sticky":false,"template":"","format":"standard","meta":{"_crdt_document":"","om_disable_all_campaigns":false,"_monsterinsights_skip_tracking":false,"_monsterinsights_sitenote_active":false,"_monsterinsights_sitenote_note":"","_monsterinsights_sitenote_category":0,"_uf_show_specific_survey":0,"_uf_disable_surveys":false,"footnotes":""},"categories":[4,1923,3],"tags":[],"class_list":["post-1260","post","type-post","status-publish","format-standard","has-post-thumbnail","hentry","category-adfs","category-microsoft-365","category-powershell"],"post_mailing_queue_ids":[],"_links":{"self":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1260","targetHints":{"allow":["GET"]}}],"collection":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts"}],"about":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/types\/post"}],"author":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/users\/1"}],"replies":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcomments&post=1260"}],"version-history":[{"count":16,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1260\/revisions"}],"predecessor-version":[{"id":5215,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/posts\/1260\/revisions\/5215"}],"wp:featuredmedia":[{"embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=\/wp\/v2\/media\/3119"}],"wp:attachment":[{"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fmedia&parent=1260"}],"wp:term":[{"taxonomy":"category","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Fcategories&post=1260"},{"taxonomy":"post_tag","embeddable":true,"href":"https:\/\/www.msb365.blog\/index.php?rest_route=%2Fwp%2Fv2%2Ftags&post=1260"}],"curies":[{"name":"wp","href":"https:\/\/api.w.org\/{rel}","templated":true}]}}