ADFS - New Farm and use existing  WID?

Posted on 2014-08-20
Last Modified: 2016-06-21
I am building two new ADFS servers.  I have two existing ADFS servers in separate data center in another state.  The two new servers are being built and located in a data center about 800 miles away from the existing ADS servers.  The new servers are to provide geo-redundancy.  

My question is if I create a new Farm for the new ADFS servers, can I use the same WID?  

Should I join the new ADFS Servers to the existing farm? (concerned about WID replication over the WAN).

Thanks much!!
Question by:Kati Dougherty
    LVL 34

    Expert Comment

    I don't think you can use WID from one ADFS farm to build another farm
    To do what you are trying to do, you can have adfs farm with wid where 1 server is primary server and you can join multiple servers to this farm as secondary servers
    All can participate in authentication actively

    Also WID replication is one time, I believe after setting up initial farm with WID, you do'n t have much changes so if there are minimum \ no chnages in adfs configuration, there will not be a replication.
    If you make any configuration changes, then only it will get replicated across all adfs servers

    Also if primary server goes down you can make another server primary and instruct another secondary servers about change in primary server

    Author Comment

    by:Kati Dougherty
    Thanks so much Mahesh.   We have an ADFS and an ADFS Proxy server in a data center on the east coast.  I am adding an ADFS and an ADFS Proxy server in a different data center in the southwest.  

    If I create a new ADFS Farm to put my new ADFS servers in (in southwest datacenter), can I use the same WID - from the ADFS Farm on the east coast?

    I'm not concerned about WAN replication since it is only deltas.
    LVL 34

    Accepted Solution

    According to my knowledge, You cannot create new farm with existing WID
    U need to join servers to existing farm if you want to use same WID
    U can create new ADFS farm with new WID

    According to my knowledge, do not create different adfs farm, this will create consfusion and you might need extra configuration for clients and applications

    Either put ADFS secondaries at different geographies or put highly available farm at single location and make it accessible from every where
    U may use SQL as database so that all adfs nodes are primary

    Check below article

    Write Comment

    Please enter a first name

    Please enter a last name

    We will never share this with anyone.

    Featured Post

    Find Ransomware Secrets With All-Source Analysis

    Ransomware has become a major concern for organizations; its prevalence has grown due to past successes achieved by threat actors. While each ransomware variant is different, we’ve seen some common tactics and trends used among the authors of the malware.

    Back in July, I blogged about how Microsoft's new server pricing model, combined with the end of the Small Business Server package, would result in significant cost increases for many small businesses (see SBS End of Life: Microsoft Punishes Small B…
    Preface There are many applications where some computing systems need have their system clocks running synchronized within a small margin and eventually need to be in sync with the global time. There are different solutions for this, i.e. the W3…
    This tutorial will walk an individual through the process of transferring the five major, necessary Active Directory Roles, commonly referred to as the FSMO roles to another domain controller. Log onto the new domain controller with a user account t…
    This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

    779 members asked questions and received personalized solutions in the past 7 days.

    Join the community of 500,000 technology professionals and ask your questions.

    Join & Ask a Question

    Need Help in Real-Time?

    Connect with top rated Experts

    16 Experts available now in Live!

    Get 1:1 Help Now