Windows 10: Azure PRT support ADFS

HI Team, Will the Azure Autopilot PRT support ADFS server On-Prem. I have a setup created where will the O365 traffic will flow On-Prem ADFS and MFA. So wanted to understand if the same flow will work for Azure PRT as well?

:)

 

ADFS to Azure

What is best practice and steps to move ADFS\MFA from on premise Windows Server 2012 R2 to Azure for HA?

 

Recommendation: Load balancer for ADFS environment?

We want to put in ADFS for our current network to support about 30K authenticated users, currently to start off just for sharepoint application, but potentially will support other application/ users as well.

Looking for recommendation on whether we should go with virtual or hardware based Load Balancer, and
which vendor of LB that people tend to adopt for their ADFS and WAP servers? Imagine we'll need to get the LB that can support Layer 7

Here is how we are currently spec'ed out so far:

• 2 WAP servers (Win2016) sit behind a LB and all on DMZ
• 2 ADFS servers (Win2016) sit behind another LB and all on Internal network
• DC server is on Internal network as well

----

Can anyone explain how the traffic/federation process goes (step by step) when user access the website from the internet (please include how request is being passed/redirect between webserver, WAP, ADFS, and DC servers)

Thanks!

 

ADFS Integration

Hi,

Actually we are developing an Enterprise SaaS Application (Mobile Application which calls a web API) hosted on Azure App service , and we need to build our application to integrate with customers through ADFS. That allows customer's employees to use the
on-premises active directory identity to access our services seamlessly.

We are totally aware of the ADFS different protocols/relaying party trust configuration/tokens/Claims but still we have a question

Q: Should we as a service provider (Resource Owner) build an ADFS farm ( as per Reference : Architectural considerations for identity in a multitenant solution - Azure Architecture Center | Microsoft Learn )
OR just develop our application to redirect the request to the customer's ADFS (Account owner) and validate tokens of the customer....... (as per Reference : https://docs.microsoft.com/en-us/wi...ad-fs/overview/ad-fs-scenarios-for-developers)
?

Thanks,

Omnia