Learn how to a build a cloud-first strategyRegister Now

x
?
Solved

ADFS 2.0 Farm setup

Posted on 2014-02-10
7
Medium Priority
?
545 Views
Last Modified: 2014-11-12
Hello All,

I am planning on setting up an ADFS farm (Federated with Office 365) that will have as members our internal ADFS (Primary ADFS server already in place) and our DR server in the cloud. Both of the servers are Windows Server 2012 Standard.

My purpose is that in case our internet connectivity goes down, our ADFS will failover to my ADFS DR server located in the cloud and users will still be authenticated in the Office 365 portal.

Can someone help me on this?
0
Comment
Question by:LuiLui77
  • 4
  • 3
7 Comments
 
LVL 44

Expert Comment

by:Vasil Michev (MVP)
ID: 39848310
You gonna use Azure for that? A good starting point is here:

http://technet.microsoft.com/library/dn509539.aspx
0
 

Author Comment

by:LuiLui77
ID: 39850273
Hi Vasilcho, Is there other options that I can use besides Azure?
0
 
LVL 44

Accepted Solution

by:
Vasil Michev (MVP) earned 1500 total points
ID: 39850942
Of course, but you mentioned the cloud, so I assumed Azure. Where are you planning to put it?

The principle is still the same, you need to bring one DC and (optionally now, as new versions dont have such restrictions), another server for the AD FS. You can also plan for Dirsync, but that is not really a critical component.

Again, good overview can be found in the Azure documentation:

http://technet.microsoft.com/en-us/library/dn509536.aspx
0
Veeam Disaster Recovery in Microsoft Azure

Veeam PN for Microsoft Azure is a FREE solution designed to simplify and automate the setup of a DR site in Microsoft Azure using lightweight software-defined networking. It reduces the complexity of VPN deployments and is designed for businesses of ALL sizes.

 

Author Comment

by:LuiLui77
ID: 39856111
Hey Vasilcho, I was not counting on the DC, I thought with the installation of AD lightweight in the same server where I want to install the secondary ADFS will do.

Can I do this?
0
 
LVL 44

Expert Comment

by:Vasil Michev (MVP)
ID: 39856359
Won't you have a DC in the DR site? :)

AD FS 2.0 does NOT support AD LDS as the account store, AD FS 1.0 did.
0
 

Author Comment

by:LuiLui77
ID: 39856545
YIKES, ok.

Can I have ADFS 2.0 on a Domain Controller?

What I am thinking about doing is promoting the Cloud Server to be a Domain Controller.

Do you think this setup will work?
0
 
LVL 44

Expert Comment

by:Vasil Michev (MVP)
ID: 39856661
AD FS 2.0/2.1? You can, but you shouldn't. It requires IIS to work, and I really doubt you or your security guy will like the idea. You can use RODC instead, but you will need to enable password caching on it for any user that needs to auth to AD FS.  

AD FS 3.0 which comes with 2012 R2 runs in the kernel and does not require IIS. You can look at that option too, but then you will probably have to rebuilt from scratch.
0

Featured Post

Problems using Powershell and Active Directory?

Managing Active Directory does not always have to be complicated.  If you are spending more time trying instead of doing, then it's time to look at something else. For nearly 20 years, AD admins around the world have used one tool for day-to-day AD management: Hyena. Discover why

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Windows Server 2003 introduced persistent Volume Shadow Copies and made 2003 a must-do upgrade.  Since then, it's been a must-implement feature for all servers doing any kind of file sharing.
With so many activities to perform, Exchange administrators are always busy in organizations. If everything, including Exchange Servers, Outlook clients, and Office 365 accounts work without any issues, they can sit and relax. But unfortunately, it…
This video shows how to use Hyena, from SystemTools Software, to bulk import 100 user accounts from an external text file. View in 1080p for best video quality.
In this video you will find out how to export Office 365 mailboxes using the built in eDiscovery tool. Bear in mind that although this method might be useful in some cases, using PST files as Office 365 backup is troublesome in a long run (more on t…

810 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question