This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
I trying to configure Azure AD connect and federation with AD FS, I logged into the VM Server using my Administrator Id& pass(this is how i generally login )
But it throws error saying you must be logged in as a domain user to configure federation with AD FS
I switched & logged into the VM Server using my own AD Id(having global administrator access) & password rather than administrator id.
and while connecting to Azure AD & connecting Directories I use my own AD Id & password
As I enter my Ad Id and Password ,It says, User is not a member of domain admin group of domain
I'm not sure what credentials should I enter in the domain credentials area.
Note : I have only Azure Active Directory and I use Azure Active Directory domain services (I don't have any domain Controller on any windows sever)
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(44.800000000000004, 78%, 14%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3ESG%3C/text%3E%3C/svg%3E)
Thank you for posting your question in Microsoft Q&A. I am looking into this thread and will get back to you post my research
Here are more details related to my "environment"
consists of an Azure AD, A SQL Azure DB and a client VM with File share..
Currently I don't have any On-Premise Active Directory anymore , I am using Azure Active Directory & Azure AD Domain services.
I have installed Azure AD connect & trying to configure Federation with AD FS on my domain-joined Web server
All the above Screenshots are from my Webserver (where my IIS & Applications are hosted)
If you do not have any on-premise active diectory then where exactly are you installing your AD connect.
Usually AD connect is installed on one of the member server which is joined to Active directory as domain machine. While installing and configuring ADFS via AD connect, it will ask for on-premise domain admin credentials because it needs to install ADFS on one of the member servers and configure it.
Usually, ADFS is used for authentication which is connected to on-premises domain controller for authentication of users.
Let's try to work on this issue offline as there are few things that needs to be considered.
Please send us an email on azcommunity [at] microsoft [dot] com with Sub - Attn: Sandeg and following details in the email body: Link to this thread/post We can connect offline and discuss further on this.