0
votes
1answer
547 views

What's the upgrade path for ADFS 2.1 to 3.0 (Server 2012 to 2012 R2)

I have several domain controllers running Windows Server 2012 with a domain and forest functional levels at Windows Server 2012. Two of the DCs are running ADFS (2.1) in a farm for users in my ...
1
vote
1answer
165 views

What actions in Office 365 trigger requests for new SAML tokens?

We're in the process of diagnosing an issue where our on-premise ADFS servers stop accepting requests from the ADFS proxy servers for short (5m intervals). One behavior that we're having difficulty ...
26
votes
7answers
2k views

If a Windows shop moves “everything” to the cloud, does it still need Active Directory?

Taking a spin off of this question: Do I really need MS Active Directory? in a new direction for 2014. Taking into account a basic Windows infrastructure: domain controllers Exchange 2007/2010/2013 ...
0
votes
2answers
216 views

Office 365 migration: should I use ADFS?

Scenario: small company (<200 users), local Active Directory (single domain, 2008R2 level), on-premises deployment of Exchange 2010, Lync 2010 and SharePoint 2013. The company wants to go ...
0
votes
1answer
274 views

Mail clients for mobile devices for connecting to ADFS configured Office 365 mail

Any of you aware of any mail clients for mobile devices for connecting to Office 365 domains which are configured to single sign on through ADFS. Outlook.com client for android this doesnt seem to ...
2
votes
1answer
565 views

Using O365, ADFS, not using DirSync/FIM, what value should immutableId be for ADFS to assert right?

ADFS 2.0 asserts the immutableID value in its SAML assertion during Federation attempts with Office 365. The ImmutableId is specified at object create time in Office 365. If you use DirSync, the ...
4
votes
1answer
529 views

Bulk update displayname attribute to match cn attribute for all AD groups

We are setting up ADFS for identity federation with a Microsoft Online service. The documentation states that "Groups without a displayname will NOT get synchronized..." We have over 250 groups that ...
1
vote
1answer
686 views

Office 365 SSO external DNS redirect

I have ADFS and office 365 completely set up and configured for SSO, using an ADFS server and ADFS proxy. For internal users, I have IIS configured on the adfs server to redirect companynamemail.com ...
0
votes
1answer
1k views

Server 2012, ADFS 2.1, and Office 365

Has anyone gotten ADFS 2.1 on Server 2012 working with o365 SSO? I have it working up to a point, I tweaked the registry to allow the powershell commands to run, user accounts syncs fine. Even the ...
0
votes
2answers
267 views

Office 365 domain federation conversion failed

We're doing things backwards, we have an established o365 domain, with 400+ users, and are just now deploying local AD, and ADFS for SSO. Last night, after configuring my servers, I ran the ...
1
vote
1answer
526 views

Redirect to ADFS login

My company has switched to Office 365 and we like it, but we would really like for the ADFS single sign on to be more simplified. We have to go to login.microsoftonline.com then type in the username, ...
1
vote
1answer
425 views

ADFS chained over 2 forests for Single Sign On on Office 365

Is it possible to provide SSO to Office 365 in following Scenario? Windows 2008 Forests Exchange 2010 Hybrid Infrastructure with On Premise and Cloud Users Account Domain -> Account Domain ...