ADFS Dedicated Server

Question

Can ADFS server be installed on a machine with other server roles installed or non-MS application services? Or is should be dedicated to ADFS only? I'm trying to look for article or documentation that will support this scenario but could not find any. Thanks.

Answer 1

Yes you can.

It creates some challenges The main two are the following:

• Delegation Hard to delegate the management of only a service on a server having multiple services. And the local administrator of that mutualized server will have full control on all the installed services. Also, ADFS is often considered as a very sensitive service (tier-0), the administrator of ADFS can impersonate whoever she or he wants against any of the relying party trust. That is sometimes pushing customer to have its dedicated server.
• Port conflicts The ADFS service needs to bind to TCP ports: 80 (if you use WID), 443, 49443 (if you use device authentication without the ADFS 2016 or above). If the other service needs those ports you won't be able to make them live together (although you can configure alternate ports to some extend on ADFS, it complexifies the solution).