federate multiple Azure AD top level domains with single ADFS

Question

Hello,

When I configure ADFS while installing Azure-AD Connect, my understanding is I am installing ADFS server in only one domain out of all the domains that I am synching to Azure-AD

This single ADFS server will be capable to federate all my top-level AAD verified domains.
So for eg., if my AAD has 2 domains i.e., constoso.com and fabrikam.com, then AAD can redirect users in both domains to the same ADFS server.
ADFS server can talk to both on-prem directories i.e., constoso.com and fabrikam.com to complete authentication and send the SAML token back to AAD

Am I correct in my understanding ?

Thanks.

Answer 1

Hello,

If i understand your question, yes it's that.
We federate 9 domain in my company.

Best regards
Please remember to "Accept Answer" if any answer/reply helped, so that others in the community facing similar issues can easily find the solution.

Answer 2

Thanks @Nicolas Roche

So you federate 9 top-level domains (not sub-domains) through one single ADFS server .

So obviously these 9 AD domains must be in their individual separate AD forests and one forest will have this ADFS server.
I believe there must be forest level trust.

Thanks.