Configuring ADFS with Multiple UPN Suffixes

HI, i am configuring an ADFS 4.0 server with an additional WAP Proxy Server to allow SSO with things such as facebook workplace and Egress Switch

we have  our primary domain which is and a load of additional UPN suffixes which users can be configured with for  example, and

the FQDN of the ADFS box will be


do we need to have a Multi-domain SAN certificate configured to allow external 3rd party applications such as office365, or facebook workspace to be able to authenticate users with usernames that contain one of the other UPN suffixes. or do we simply need a single domain certificate for


Andy DoeAsked:
Who is Participating?
MaheshConnect With a Mentor ArchitectCommented:
for O365, you don't need SAN certificate, your adfs single hostname cert will work though you have multiple domains

If you wanted to publish Apps with different domain names through your web proxy server, you need cert with app URL FQDN and that must be installed on adfs proxy server
Infact no matter you have app published with same domain name as adfs, still you need to install app URL certificate on web application proxy server
Seth SimmonsSr. Systems AdministratorCommented:
No comment has been added to this question in more than 21 days, so it is now classified as abandoned.

I have recommended this question be closed as follows:

Accept: Mahesh (https:#a42498093)

If you feel this question should be closed differently, post an objection and the moderators will review all objections and close it as they feel fit. If no one objects, this question will be closed automatically the way described above.

Experts-Exchange Cleanup Volunteer
Question has a verified solution.

Are you are experiencing a similar issue? Get a personalized answer when you ask a related question.

Have a better answer? Share it in a comment.

All Courses

From novice to tech pro — start learning today.