ADFS with multiple forest authentication to Azure AD

Understand ADFS requirements when synchronizing multiple forests to a single Azure AD instance.

John Savill

July 2, 2016

1 Min Read
ADFS with multiple forest authentication to Azure AD

Q. If I synchronize multiple forests to Azure AD do I need multiple ADFS instances?

A. Azure AD Connect supports the synchronization of multiple forests to a single Azure AD instance as explained at http://windowsitpro.com/azure/syncing-multiple-forests-azure-ad. ADFS enables federation to be used for Azure AD authentication which means the authentication actually is performed against the on-premises Active Directory Domain Controllers. If you have multiple forests that have bi-directional trusts between them then a single ADFS instance can be used for authentication for all forests. If there are not bi-directional trusts between the forests then a separate ADFS instance will be required for each forest.

About the Author

Sign up for the ITPro Today newsletter
Stay on top of the IT universe with commentary, news analysis, how-to's, and tips delivered to your inbox daily.

You May Also Like