Solved

ADFS with two email domains.

Posted on 2016-09-22
2
31 Views
Last Modified: 2016-10-11
Current setup: One AD domain with one ADFS server, and one ADFS proxy server. This ADFS setup is used for employees with an email domain of abc.com to access CRM. We would like to setup AD authentication for other employees in our company to access a different application, and their email domain is cde.com. The current ADFS server is setup with a certificate for the abc.com email domain.

My question is should I build an ADFS connection on the current server with cde.com, should I build an additional server and create an ADFS farm, or should I build an additional server but not in a farm (since the email domains are different)?

Thanks,
Bill
0
Comment
Question by:whbaxter
  • 2
2 Comments
 
LVL 39

Accepted Solution

by:
Adam Brown earned 500 total points (awarded by participants)
ID: 41811491
If these users are in the same Domain/Forest, the Email domain doesn't really matter so much. The certificate you have is still valid, you would just need to make sure the trust relationship between the new application and the ADFS server uses the URL on the certificate. For the most part, that certificate is just used for encrypting the connection to ADFS's HTTPS portal, so it doesn't normally get used for the actual ADFS functions. You can use the same ADFS server for both applications and email domains without a problem, it's just a more complex setup that requires you to include rules to exclude users that don't have the proper alias from connecting to the application they aren't supposed to use.
0
 
LVL 39

Expert Comment

by:Adam Brown
ID: 41838086
no response
0

Featured Post

Efficient way to get backups off site to Azure

This user guide provides instructions on how to deploy and configure both a StoneFly Scale Out NAS Enterprise Cloud Drive virtual machine and Veeam Cloud Connect in the Microsoft Azure Cloud.

Question has a verified solution.

If you are experiencing a similar issue, please ask a related question

Suggested Solutions

[b]Ok so now I will show you how to add a user name to the description at login. [/b] First connect to your DC (Domain Controller / Active Directory Server) SET PERMISSIONS FOR SCRIPT TO UPDATE COMPUTER DESCRIPTION TO USERNAME 1. Open Active …
This article explains the steps required to use the default Photos screensaver to display branding/corporate images
This tutorial will walk an individual through the steps necessary to join and promote the first Windows Server 2012 domain controller into an Active Directory environment running on Windows Server 2008. Determine the location of the FSMO roles by lo…
This tutorial will walk an individual through the process of configuring their Windows Server 2012 domain controller to synchronize its time with a trusted, external resource. Use Google, Bing, or other preferred search engine to locate trusted NTP …

790 members asked questions and received personalized solutions in the past 7 days.

Join the community of 500,000 technology professionals and ask your questions.

Join & Ask a Question