QRG | Quick Reference Guide | Active Directory Federation Services | aka.ms/ADFSLinks

Welcome to this custom Quick Reference Guide. The purpose of this guide is to provide you with the latest top resources for Windows Server 2012 R2 and 2016 Active Directory Federation Services.

Installing and Configuring a Federation Farm is simple today.  They are just roles on Windows Servers from 2012 on.  The trickier parts are getting name resolution, load balancing and certificates done right.  If you are starting from scratch, check out the second link below on requirements and read the whole thing.  If you get all of the requirements down, you'll be heading down the right path.  And, if you or someone else set up the environment, go back to the checklist to ensure everything was done right.  Finally, in the words of the infamous Laura Hunter "If it's not a cert, it's a typo.  If it's not a typo, it's a cert."  This is so true once you are beyond the setting up the farm and getting it to work, and then start adding trust relationships.  Remembering that mantra has helped me to get back to basics when troubleshooting trust relationships.  Sometimes, it take getting on the phone with the other side of that trust relationship to have them SHOW you how they configured their side of the trust.  Those little typos can sting every time and take hours to resolve!

 

Top Core AD FS  Links Active Directory Federation Services - all AD FS Requirements New!  Manage and customize Active Directory Federation Services by using Azure AD Connect Multiple Domain Support for Federating with Azure AD ADFS Help + Tools New!  AD FS Rapid Restore Additionally, this is useful if you hit the 100+RPs for a WID farm.  Use can use this to switch from WID to SQL by specifying the SQL connection string for the ‘DBConnectString’ parameter. I’d suggest validating this in a test environment.  :) ADFS: Certificate Authentication with Azure AD & Office 365 ADFS Deep Dive: Planning and Design Considerations Guidance for selecting a Federation Service Name  - still good! Name Resolution Requirements for Federation Servers Name Resolution Requirements for Federation Server Proxies AD FS PowerShell Cmdlets Planning for AD FS Server Capacity SS for 2016 also! Best practices for securing Active Directory Federation Services ***** Using Azure AD Connect Health with AD FS Under the hood tour of Azure AD Connect Health: AD FS Diagnostics Module ♦  Required Updates for Active Directory Federation Services (AD FS) and Web Application Proxy (WAP) AD FS Content Map for older AD FS 2.0 content AD FS in Azure AD FS deployment in Azure New!  Azure Active Directory Hybrid ADFS Lab - ARM Template - excellent Another ARM Template AD FS/WAP in Azure! Load Balancing AD FS Services In Azure RM more manual, but this blog walks through all of the bits and pieces you need to know! High availability cross-geographic AD FS deployment in Azure with Azure Traffic Manager Can you deploy Windows Server AD FS on Azure Virtual Machines?  Guidelines for Deploying Windows Server Active Directory on Azure Virtual Machines AD FS on Windows Server 2016 What's new in Active Directory Federation Services for Windows Server 2016  Upgrade and Deployment Guides for AD FS 2016 Web Application Proxy in Windows Server 2016 Troubleshooting Web Application Proxy AD FS 2016 Upgrade and Deployment Guides Configure AD FS 2016 and Azure MFA Name Resolution / Networking Name Resolution Requirements for Federation Servers Name Resolution Requirements for Federation Server Proxies Configure Name Resolution for a Federation Server Proxy in a DNS Zone That Serves Only the Perimeter Network Hardware Load Balancer Health Checks and Web Application Proxy / AD FS 2012 R2 Deploying F5 with Microsoft Active Directory Federation Services Load balance ADFS 3.0 using Netscaler Miscellaneous Topics of interest New Managing SSL/TLS Protocols and Cipher Suites for AD FS Understanding AD FS Claim Rule Language Configuring AD FS Extranet Lockout Configuring intranet forms-based authentication for devices that do not support WIA Troubleshooting AD FS  AD FS Operations  Web Application Proxy as a replacement for AD FS Proxy The Role of the AD FS Configuration Database Federation Server Farm using SQL How to Utilize the WS-Federation WHR Parameter to Bypass Home Realm Discovery (HRD) Install .Net 4.5 Sample Claims Aware application  Server 2012 R2 AD FS Deployment Guide Setup AD FS Lab Environment for 2012R2 Guidance for selecting a Federation Service Name -still good! A Guide to Claims-Based Identity and Access Control (2nd Edition) Customize AD FS Sign-In Pages How to “TOTALLY” customize your Home Realm Discovery Page in Windows Server 2012 R2 ADFS Using Azure AD Connect Health with AD FS Application Proxy Azure AD Application Proxy MSDN - Using Application Proxy Application Proxy Blog TechNet Web Application Proxy Troubleshoot Web Application Proxy Deploy the Web Application Proxy Publishing Paths to Success - learn what works and does not work with Web Application Proxy Script and Backup Your Web Application Proxy Configuration SCOM MGT Pack Web Application Proxy

AD FSTraining  TechNet AD FS Series How to: Installing an AD FS Farm Installing Web Application Proxy Add Relying Party Trust Updating Certificates Enable Device Registration Service Microsoft Virtual Academy and Ignite  MVA: Identity and Access This is a Microsoft Virtual Academy course covering multiple identity topics from AD DS, AD FS , RDS and VDI. Ignite 2017  What's new and upcoming in AD FS to securely sign-in your users to Office 365 and other applications Ignite 2016 NZ Integrating OpenID Connect / OAuth2 with Azure AD and ADFS Ignite 2016 Discover what’s new in Active Directory Federation and domain services in Windows Server 2016 Ignite 2015:Taking advantage of Identity capabilities in Azure Pack | Great overview of Identity Federation fundamentals and then covers MFA Ignite 2015 Extending On-Premises Directories to the Cloud Made Easy with Azure Active Directory Connect Extending On-Premises Directories to the Cloud Made Easy with Azure Active Directory Connect Identity and Access Management  Covers AD FS TechEd Europe 2014: Active Directory + BYOD = Peace of Mind  - 400 level deep dive of Authentication and Authorization Pipeline - excellent! SAML Integration  AD FS and SAML Interoperability Guide  Name Identifiers in SAML Assertions  OASIS SAML 2.0 Documentation Library  Asserting the NameID Claim type with additional properties AD FS Relay State Generator Supporting Identity Provider Relay State AskDS - AD FS Relay State AD FS  Scripting Reset the Service Account O365 Federation Metadata Update Automation AD FS Diagnostics Module AD FS Cmdlets in PowerShell Web Application Proxy PS Cmdlets Using REGEX in Claim Rule Language Blogs SameulD's Blog - Mr. ADFS to you :) What’s new in ADFS on Windows Server 2012 R2 Ask Premier Field Engineering ADFS Deep-Dive: Primer Enabling AD FS 2012 R2 Extranet Lockout Protection Demystify extranet lockout feature in AD FS 3.0 ADFS extranet lockout and PDC requirement Deep Dive!  ADFS Deep-Dive: Comparing WS-Fed, SAML, and OAuth Deep Dive! Ask Premier Field Engineering (PFE) Platforms - ADFS Tags ADFS Deep Dive: Certificate Planning How To Install AD FS 2012 R2 For Office 365 Part 2 Part 3 Under the hood tour on Multi-Factor Authentication in ADFS – Part 1: Policy Under the hood tour on Multi-Factor Authentication in ADFS – Part 2: MFA aware Relying Parties Samuel Devasahayam's Blog from engineering ADFS: Certificate Authentication with Azure AD & Office 365 Understanding the AD FS Proxy - even though this is for 2.0, this role still exists for Web Application Proxy, and this explains WHY you should have these roles. Downloads Postman - a google app Script Center: AD FS Diagnostics Module Azure AD Connect Preview Download Download Fiddler - to trace web traffic How to use Fiddler for WebSSO - must read! SAML Request / Response decoder! Firefox SAML Tracer Add-on System Center Management Pack AD FS

Comments

• Anonymous
  May 29, 2015
  It's so awesome, Thank a lot.Yes_đồ chơi cho bé_dochoi.net.vn
• Anonymous
  June 06, 2015
  Thanks! Glad you like it! I'll keep it updated as I dig up links for my various customers' initiatives
• Anonymous
  October 31, 2015
  looks great.
  
  sent from whatsapp pc: https://www.facebook.com/WhatsAppPerPC
• Anonymous
  October 31, 2015
  https://for-pcs.com/download-whatsapp-for-pc
• Anonymous
  October 31, 2015
  Awesome work. Thanks Much.
• Anonymous
  January 15, 2017
  great guide. Thanks for sharing
• Anonymous
  March 20, 2017
  thank you for updating with this latest information which benefitted me a lot.
• Anonymous
  July 30, 2017
  Nice, Quick Reference Guide. Useful information. Thanks for your sharing. Hope to see more posts.Jio (Jiotv apk)