troubleshooting Question

AD FS with public domain name SSL certificate on private domain

Avatar of erik_r
erik_r asked on
* DNS Zone* Active Directory Federation Services (ADFS)DNS* adfs
3 Comments1 Solution14 ViewsLast Modified:
Hello.  My Active Directory domain name is private.com.  My email domain is public.com which is used with O365 and a public facing website.

I'm setting up AD FS (at the moment NOT for O365) and purchased a wildcard SSL cert for *.public.com.  My mind kind of went blank on this one since I see the email (public) domain on a daily basis.

Now, the name of my AD FS farm is adfs.public.com.  I would like to use this name and it auto-populated because the SSL cert I installed on this server is *.public.com.

The name of the server running AD FS is adfs-1.private.com.  I read that a CNAME record should be created for adfs.public.com to point to adfs-1.private.com.  Is this correct?  If so, how would you deal with adding more than one AD FS server to the farm.

I don't know how to make adfs.public.com work for internal users in the DNS forward lookup zone for private.com.  Now, I can create another forward lookup zone named adfs.public.com (the subdomain name of adfs in front of private.com should alleviate any DNS issues with internal users browsing to public.com websites and such) and create a host entry to adfs-1.private.com.  It won't let me create a CNAME record to another forward lookup zone.

At the moment I'm only concerned with internal name resolution.

Either I am over complicating this or my approach is way off base and too simple.

Thank you.
ASKER CERTIFIED SOLUTION
Join our community to see this answer!
Unlock 1 Answer and 3 Comments.
Start Free Trial
Learn from the best

Network and collaborate with thousands of CTOs, CISOs, and IT Pros rooting for you and your success.

Andrew Hancock - VMware vExpert
See if this solution works for you by signing up for a 7 day free trial.
Unlock 1 Answer and 3 Comments.
Try for 7 days

”The time we save is the biggest benefit of E-E to our team. What could take multiple guys 2 hours or more each to find is accessed in around 15 minutes on Experts Exchange.

-Mike Kapnisakis, Warner Bros