How to use Azure AD and ADFS both on same domain.

Question

I have a domain federated in the entra and it uses SAML protocol to authenticate the user on on-premise AD. This is working fine. Now I want to exclude users from using the ADFS and they should use Azure AD to access the cloud application.

This is similar to the staged rollout feature provided by Azure. But for staged rollout feature Microsoft Entra Connect needs to be installed and Password hash sync is a prerequisite step.

I do not want to use Microsoft Entra Connect but want to achieve staged rollout feature.

Any article explaining how to achieve this will help.

Thank you

Answer 1

Hi @ABHAY CHOKSI

Thank you for post!

I understand that you would like to exclude users from using ADFS and have them use Entra ID to access the cloud application.

To answer your question, we regret to inform you that currently, your request is only possible with the staged rollout feature. Without the staged rollout feature and Microsoft Entra Connect, it is indeed not possible to exclude users from using ADFS to authenticate with Entra ID.

We would appreciate it if you could share your feedback on this feature in our feedback recovery of access review viahttps://feedback.azure.com/d365community/. This site is closely monitored by our product team.

Hope this helps. Do let us know if you any further queries.

Thanks,

Akhilesh.

---

If this answers your query, do click Accept Answer and Yes for was this answer helpful. And, if you have any further query do let us know.