Link to home
Start Free TrialLog in
Avatar of K B
K BFlag for United States of America

asked on

AD CONNECT: Installing AD FS without AD CONNECT (or not)?

I would like to end up with:
2 ADFS Proxy Servers (Load Balanced by F5's)
4 ADFS Servers (Load Balanced by F5's)

Should I allow AD Connect to built the first Proxy Server and ADFS Server, then I build from there?

Or did AD Connect stop using NLB to load balance... I think I might be remembering it in preview?
Can I just let it build the farm completely and I can use my own F5's from there?
Just double checking.

Thank you
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Well, you didn't mention O365 in your question, but you did include it as a tag. And your si ject doesnt quite match the content so i'll start by saying AADConnect is *required* to use ADFS with O365. Which might make the rest of your question moot. If not, can you clarify?
Avatar of K B

ASKER

Thank you for your reply Cliff.

Apologies yes 365 is the relying party that I would like to setup.

I know you can use AD Connect to automatically setup AD FS or you can manually install the roles & configure it.

In 2014, the preview of AD Connect (unless I am recalling incorrectly) would configure NLB if you created a ADFS Farm as the method of load balancing.

Does AD Connect create the farm with the anticipation that you will use an external LB and not utilize NLB - as I am wanting to use my F5s.

Thank you
ASKER CERTIFIED SOLUTION
Avatar of Cliff Galiher
Cliff Galiher
Flag of United States of America image

Link to home
membership
This solution is only available to members.
To access this solution, you must be a member of Experts Exchange.
Start Free Trial
I can't speak specifically to AADConnect, I'll be migrating to using it shortly, but everything I have was set up with the older DirSync.  I can't imagine AADConnect forcing you to do anything (there would be so many scenarios that would break if that were the case).   I recently added new ADFS servers, and any load-balancing you choose to set up is completely separate.