0

During the recent outage of Azure, a company I am aware of lost it's federated services farm as the underlying VMs lost access to their storage. I've been asked to suggest ways of adding High Availability to their current, textbook implementation (really, textbook https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/how-to-connect-fed-azure-adfs ).

About the only way I can think of that would work would be a redundant Federated Services farm, in a different Azure region - but I can't find any MS documentation that implies that this is even possible. You certainly don't appear to be able to have multiple URIs for federating a domain via multiple federation server farms.

Any ideas people?

1

I would recommend looking at Azure Site Recovery to another Azure region (aka Azure to Azure ASR). There are special considerations for domain controllers but this would not only protect your ADFS instance but would allow you to test fail-over to ensure this solution will protect you in the event of a regional outage.

Your Answer

By clicking "Post Your Answer", you acknowledge that you have read our updated terms of service, privacy policy and cookie policy, and that your continued use of the website is subject to these policies.

Not the answer you're looking for? Browse other questions tagged or ask your own question.