Solved

ADFS with two email domains.

Posted on 2016-09-22
2
30 Views
Last Modified: 2016-10-11
Current setup: One AD domain with one ADFS server, and one ADFS proxy server. This ADFS setup is used for employees with an email domain of abc.com to access CRM. We would like to setup AD authentication for other employees in our company to access a different application, and their email domain is cde.com. The current ADFS server is setup with a certificate for the abc.com email domain.

My question is should I build an ADFS connection on the current server with cde.com, should I build an additional server and create an ADFS farm, or should I build an additional server but not in a farm (since the email domains are different)?

Thanks,
Bill
0
Comment
Question by:whbaxter
  • 2
2 Comments
 
LVL 39

Accepted Solution

by:
Adam Brown earned 500 total points (awarded by participants)
ID: 41811491
If these users are in the same Domain/Forest, the Email domain doesn't really matter so much. The certificate you have is still valid, you would just need to make sure the trust relationship between the new application and the ADFS server uses the URL on the certificate. For the most part, that certificate is just used for encrypting the connection to ADFS's HTTPS portal, so it doesn't normally get used for the actual ADFS functions. You can use the same ADFS server for both applications and email domains without a problem, it's just a more complex setup that requires you to include rules to exclude users that don't have the proper alias from connecting to the application they aren't supposed to use.
0
 
LVL 39

Expert Comment

by:Adam Brown
ID: 41838086
no response
0

Featured Post

Is Your AD Toolbox Looking More Like a Toybox?

Managing Active Directory can get complicated.  Often, the native tools for managing AD are just not up to the task.  The largest Active Directory installations in the world have relied on one tool to manage their day-to-day administration tasks: Hyena. Start your trial today.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

Mapping Drives using Group policy preferences Are you still using old scripts to map your network drives if so this article will show you how to get away for old scripts and move toward Group Policy Preference for mapping them. First things f…
Find out how to use Active Directory data for email signature management in Microsoft Exchange and Office 365.
This Micro Tutorial hows how you can integrate  Mac OSX to a Windows Active Directory Domain. Apple has made it easy to allow users to bind their macs to a windows domain with relative ease. The following video show how to bind OSX Mavericks to …
Microsoft Active Directory, the widely used IT infrastructure, is known for its high risk of credential theft. The best way to test your Active Directory’s vulnerabilities to pass-the-ticket, pass-the-hash, privilege escalation, and malware attacks …

777 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question