ADFS migration from one farm to another

Tim 21 Reputation points
2020-05-25T20:05:27.07+00:00

My company own 2 ADFS farms, lets call them fed1.company.com and fed2.company.com. Both farms run on server 2016 and consist of 2 ADFS servers and 3 WAP servers.

Fed1 currently hosts the RPT for O365, fed2 hosts several 3th party RPT's. The goal is to move the O365 RPT to fed2, and eventually get rid of the fed1 farm.
What steps would I need to perform to move the current O365 RPT from fed1 to fed2?

I have been searching online but the information I found seems to be a bit inconclusive.

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,222 questions
0 comments No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Pierre Audonnet - MSFT 10,171 Reputation points Microsoft Employee
    2020-05-25T20:21:32.633+00:00

    I would start by saying that you do not require ADFS for Single Sign On with Azure AD. You can use the Azure AD Connect Seamless SSO option to achieve this. So the easiest way for you might just be to get rid of ADFS for Azure AD workload (such as Office 365).

    Now, you can set up the trust on ADFS and update it in Azure AD using the Azure AD Connect wizard. Look at the section Modify the AD FS configuration.


  2. Gopi Ponnusamy 41 Reputation points
    2021-07-05T16:15:44.2+00:00

    I would suggest to re-create the RPT to new farm similar to old RPT including claim rules.
    then communicate to application owner with new metadata and certificate (if required).
    post switch over from app team you can disable/delete the RPT from old farm.

    If in case of more RPT then do it in Powershell.

    I have performed similar activity (approx. 250+) from 2012 to 2019.

    All the best.!

    0 comments No comments