Migrate Azure AD AAD Connect federation to another ADFS farm

Question

Hi,

Because of a name change in our company we need to migrate all relying parties from one ADFS to another.
How can I migrate the AAD Connect federation with Azure AD to anonther ADFS farm?

Any help would be appreciated.

Answer 1

Hi @MrEco-9773,

The process for moving Azure AD Connect to a new server: compare configurations of the old and new servers, add AAD Connect on a new server, enable staging mode on it, remove AAD Connect from the old server, and disable staging mode on the new one.

https://learn.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-sync-staging-server

As for migrating ADFS, if it is a farm then you can add an additional ADFS server as a secondary one and then make it primary: http://social.technet.microsoft.com/wiki/contents/articles/1432.ad-fs-2-0-how-to-set-the-primary-federation-server-in-a-wid-farm.aspx

Once done, you can remove the other server.

If it is standalone, you can refer to these guides:

http://technet.microsoft.com/en-us/library/jj648429.aspx

https://learn.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/migrate-ad-fs-stand-alone-server

Answer 2

It's not well documented, but version 1.4 of AD Connect has features to modify your ADFS configuration: https://dirteam.com/sander/2019/09/16/azure-ad-connect-version-1-4-introduces-refined-ad-fs-management-capabilities/.
Just clicking through the wizard and that's it!