Active Directory Federation Service (AD FS) Design

Diagram

With the following details:

• Windows remote management must be enabled on ADFS/WAP servers for remote installation.
• Database : Windows Internal Database (WID)
• need SSL Certificate for Active Directory Federation Services: Names:
  • federation service name(CN:sts.domain.com)
• DNS record for Internal/External ADFS URL
  • Internal record must be A record
• AD FS federation service name(sts.domain.com), must be added to intranet zone in IE
• https://secure.aadcdn.microsoftonline-p.com must be in the trusted sites list
• To connect to Azure AD through PowerShell, install the following:
  • Microsoft Online Service Sign-in Assistant for IT Professionals RTW
  • Windows Azure Active Directory Module for Windows PowerShell (64-bit version)