Error when trying to configure Hybrid Azure AD Joined Devices

Question

Hello,

New here, glad to have found this forum. I am having an issue trying to configure Hybrid AD join of my devices from my on-prem AD setup. I've followed microsoft's documentation to configure via the Azure AD connect wizard. After running through the config steps, and clicking the 'Configure' button, I get an error stating that there was a problem, and couldn't continue the integration. I scanned the provided log file, and saw this:

[16:58:55.305] [ 17] [ERROR] PerformConfigurationPageViewModel: An error occurred executing Update ADFS Federated AAD Trust task: Unable to update the metadata on the federated domain.

Scanning further, I also saw this:

Exception Data (Raw): Microsoft.Online.Deployment.PowerShell.PowerShellInvocationException: An error occurred while executing the 'Update-MsolFederatedDomain' command. MSIS7612: Each identifier for a relying party trust must be unique across all relying party trusts in AD FS configuration. ---> System.Management.Automation.RemoteException: MSIS7612: Each identifier for a relying party trust must be unique across all relying party trusts in AD FS configuration.

There is a step during configuration to create a service point connection, I referenced my ADFS server in the 'Authentication Service' field. I'm not sure whether this is the correct choice vs selecting 'Azure Active Directory'. The reason I chose my ADFS server is because we want our users to authenticate via ADFS for Azure AD.

My environment consists of an on-prem Active Directory, and my end goal is to sync our laptops over to Azure AD, which should in turn get synced to the Microsoft Endpoint Mananger UI, so that I may use Intune to apply polices to our devices.

Any help is greatly appreciated, thanks.

jp

Answer 1

Did you follow this document - https://learn.microsoft.com/en-us/azure/active-directory/devices/hybrid-azuread-join-federated-domains? Could you please let us know which step is failing for you?