Exporting users via AD FS

Hi,

I have a local web asp system, that large companies use. I run with local users, in that system. To day, we have been importing users from a security group in the customers Active Directory. That means that we have read access to that security group in the customers AD. Then we have had AD FS integration, and validated users in that manner. And if a user was deleted or deactivated in AD, it would be the same in our system automatically.

However I need to plan a design change, because new customers deny us access directly to their AD. And as far as I see it, AD FS does not support user export ?

I was thinking about making a web service, witch the users via AD FS connects against, and make that web service create the users in my web application user database.

Any thoughts / Suggestions on the subject would be highly appreciated.

BR

LHC
melfaritAsked:
Who is Participating?

[Product update] Infrastructure Analysis Tool is now available with Business Accounts.Learn More

x
I wear a lot of hats...

"The solutions and answers provided on Experts Exchange have been extremely helpful to me over the last few years. I wear a lot of hats - Developer, Database Administrator, Help Desk, etc., so I know a lot of things but not a lot about one thing. Experts Exchange gives me answers from people who do know a lot about one thing, in a easy to use platform." -Todd S.

Rakesh KapoorCommented:
AD FS is not for exporting the users. You can use powershell scripts to export the users. Details are given in the article.

https://gallery.technet.microsoft.com/scriptcenter/Powershell-script-to-5edcdaea
melfaritAuthor Commented:
Hi,

I wish to create a solution where the users are created in my local user database automatically. I was thinking on somewhere what Salesforce are doing. I just do know quite where to begin. I'm thinking something about setting up a web server between ad fs and my web server, to take of this.

Powershell is not what I'm looking for, but thanks for the suggestion!

BR

Lasse
Rakesh KapoorCommented:
AS you export the users.. similarly you can import them in AD using the script.
Creating Active Directory Users from a Text File

If your organization has a need to mass-create AD user accounts, watch this video to see how its done without the need for scripting or other unnecessary complexities.

melfaritAuthor Commented:
Hi Rakesh,

I do not have access to the customers AD, so I can no export the users. I want to make a web service that automatically takes the users AD FS credentials (based on Claims rules), and create the users based on for example, email adresse, and name+surname in my local database....

BH

Lasse
Cliff GaliherCommented:
ADFS alone isn't enough to do this. There is a reason web services require some sort of access direct or indirect. Take Office 365, for example. To use ADFS, DirSync or ADConnect must also be deployed as a REQUIREMENT. It has access to both AD and the local database to sync user account information. You'll find all services that support that level of provisioning use a similar architecture. If Microsoft itself isn't using ADFS alone for its premiere cloud services, it pretty obviously can't be done.
Rakesh KapoorCommented:
IN that case I'd suggest to use FIM, it would help you in replicate users to another box.
melfaritAuthor Commented:
Hi ,

Do you have a link to an article about the subject ?

BR

LHC
Rakesh KapoorCommented:

Experts Exchange Solution brought to you by

Your issues matter to us.

Facing a tech roadblock? Get the help and guidance you need from experienced professionals who care. Ask your question anytime, anywhere, with no hassle.

Start your 7-day free trial
It's more than this solution.Get answers and train to solve all your tech problems - anytime, anywhere.Try it for free Edge Out The Competitionfor your dream job with proven skills and certifications.Get started today Stand Outas the employee with proven skills.Start learning today for free Move Your Career Forwardwith certification training in the latest technologies.Start your trial today
Web Development

From novice to tech pro — start learning today.