How can I configure the AD FS federation service so that avatars of users synchronized with Azure AD Connect are displayed and Windows applications are automatically logged in?

Question

How can I configure the AD FS federation service so that avatars of users synchronized with Azure AD Connect are displayed and Windows applications are automatically logged in?

Good day! Given:

A server running Windows Server 2022 Datacenter, domain: chuc218.ru

Is it necessary to: configure the AD Federation Service (AD FS) so that avatars of users synchronized with Azure AD Connect are displayed on client PCs running Windows 10 and there is an automatic login to Windows applications, for example, Microsoft Edge? Because it's critically important to me.

How to do it? I've already tried all the options, nothing helps.

0 comments

2 answers

Your answer

Answer 1

Кирилл Евгеньевич 0

Thanks! Thanks! But all the same, I want to configure AD FS so that when my users log into their Microsoft 365 personal account, they display CHUC Corporation (what I have configured for federations)

0 comments

Answer 2

Raja Pothuraju 47,165 Microsoft External Staff Moderator

Hello @Кирилл Евгеньевич,

Thank you for posting your query on Microsoft Q&A.

Based on your description, I see that you are using Windows Server 2022 Datacenter with the domain chuc218.ru and are looking for an SSO experience where users can log into applications without needing to enter their username and password. To achieve this, you do not need to set up an ADFS environment. You can enable SSO on Windows 10 devices by enrolling them with Microsoft Entra. Since you already have Microsoft Entra Connect and are syncing users from on-premises to the cloud, you can enroll the devices as either Microsoft Entra Joined or Microsoft Entra Hybrid Joined.

If your Windows 10 devices are domain-joined, you can follow the Microsoft documentation to configure Microsoft Entra Hybrid Join:

Configure Microsoft Entra hybrid join

If the devices are not domain-joined, you can easily make them Microsoft Entra Joined by following the guide below:

How to join a Windows device to Entra ID

I hope this information is helpful. Please feel free to reach out if you have any further questions.

If the answer is helpful, please click "Accept Answer" and kindly upvote it. If you have extra questions about this answer, please click "Comment".

Thanks,
Raja Pothuraju.

Кирилл Евгеньевич 0 Reputation points

2024-09-27T16:44:20.57+00:00

Thanks! Thanks! But all the same, I want to configure AD FS so that when my users log into their Microsoft 365 personal account, they display CHUC Corporation (what I have configured for federations)
Raja Pothuraju 47,165 Reputation points Microsoft External Staff Moderator

2024-10-01T21:32:57.11+00:00

Hello @Кирилл Евгеньевич,

I see you are trying to configure ADFS farm on your environment. If that is the case, please refer the below documents to configure ADFS farm on your Windows server.

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/configure-a-federation-server#configure-the-first-federation-server-in-a-new-federation-server-farm

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/ad-fs-deployment

Thanks,
Raja Pothuraju.
Raja Pothuraju 47,165 Reputation points Microsoft External Staff Moderator

2024-10-05T00:57:55.77+00:00

Hello @Кирилл Евгеньевич,

Following up to see if the below suggestion was helpful. And, if you have any further query do let us know.

Share via

How can I configure the AD FS federation service so that avatars of users synchronized with Azure AD Connect are displayed and Windows applications are automatically logged in?

2 answers

Your answer