Microsoft 365 Federated Domain

Question

Hi,

When configuring ADFS SSO with Microsoft 365 we have to convert domain from managed to federated, I would like to know what is impact of converting from managed to federated.

I appreciate if somebody share reference or resource link etc.

Regards,

Answer 1

Hello! I'd be happy to help you with your question.

When you convert a managed domain to a federated domain for use with Microsoft 365, there are several impacts that you should be aware of:

1. User authentication: With a managed domain, user authentication is managed by Microsoft, and users sign in to Microsoft 365 using their username and password. With a federated domain, user authentication is handled by your organization's Active Directory Federation Services (ADFS) server, and users sign in to Microsoft 365 using their corporate credentials.
2. Single Sign-On (SSO): Federating your domain allows you to implement SSO, which enables users to sign in once to their corporate network and automatically be signed in to Microsoft 365 without having to enter their credentials again. This can improve productivity and security by reducing the number of times users need to enter their passwords.
3. Federation server requirements: When you federate your domain, you'll need to set up and maintain an ADFS server to handle authentication requests. This adds an additional layer of complexity to your environment, and requires additional hardware and software resources.
4. Certificate management: When you federate your domain, you'll need to obtain and manage SSL/TLS certificates for your ADFS server. This includes renewing certificates before they expire, and ensuring that the certificates are installed correctly on all servers in the federation trust.

Overall, the impact of converting from a managed to a federated domain depends on the size and complexity of your organization, as well as your specific requirements for user authentication and SSO. While federating your domain can add additional complexity to your environment, it can also provide significant benefits in terms of security and user productivity.