ADFS Native Database Migration

Jerwal 1 Reputation point
2020-12-16T15:39:51.21+00:00

Hello,

I would like to migrate our existing on prem ADFS SQL database's (AdfsArtifactStore and AdfsConfiguration) to Azure SQL Managed Instance (paas) so no cloud vm is required. Is this possible?

If not, can I migrate them to to an Azure vm with SQL server on it? Can you confirm what SQL Server version is supported for this setup?

Many thanks
Jerome

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,201 questions
0 comments

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2020-12-17T02:57:10.803+00:00

    Azure SQL is not supported as a backend for ADFS.

    SQL doesn't offer a lot comparing to the local WID...

    1. A SQL backend is required for Token Replay Detection. But that is only for Claim Provider trusts else than Active Directory. So if you only have only Active Directory listed in the Claim Provider Trust section of the administrtive console, that's useless.
    2. A SQL backend is required to use the SAML Artifact Resolution profile of SAML2. This is very rare to use this SAML feature and most (if not almost all) applications in the markets are not using it.
    3. A SQL backend is required if you have more than 100 trusts.

    If you are not in these 3 cases, you should maybe condiser moving to WID. You can use the Rapid Restore PowerShell module to backup your environment and restore it into a WID environment.
    And/or you can also look at using Azure AD as an IDP then you don't have to manage any servers. But that's if you have an Azure AD directory.