This browser is no longer supported.
Upgrade to Microsoft Edge to take advantage of the latest features, security updates, and technical support.
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(281.6, 68%, 37%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAG%3C/text%3E%3C/svg%3E)
Good morning!
I am an IT Pro Jr and I have some doubts on the subject.
Currently many customers use AD FS to validate to O365.
I have read in some blogs that the trend is to migrate from AD FS to Azure AD for validation of users in O365.
Is this real, and what are the benefits of having Azure AD to AD FS?
Just checking in to see if the below answer helped. If this answers your query, please don’t forget to click "Accept the answer" and Up-Vote for the same, which might be beneficial to other community members reading this thread. And, if you have any further query do let us know.
Thanks,
![](data:image/svg+xml, %3Csvg xmlns='http://www.w3.org/2000/svg' height='64' class='font-weight-bold' style='font: 600 30.11764705882353px "SegoeUI", Arial' width='64'%3E%3Ccircle fill='hsl(256, 90%, 34%)' cx='32' cy='32' r='32' /%3E%3Ctext x='50%25' y='55%25' dominant-baseline='middle' text-anchor='middle' fill='%23FFF' %3EAK%3C/text%3E%3C/svg%3E)
Hi, if the posted answer resolves your question, please mark it as the answer by clicking the check mark. Doing so helps others find answers to their questions.
Originally, customers used ADFS for Office 365 (well, technically ADFS trusts Azure AD, not Office 365, Office 365 is more a suite of products) to get Single-Sign-On (SSO) with their on-premises domain-joined machines.
Now we can have SSO without deploying ADFS (Azure AD Connect Seamless-SSO, Azure AD joined machines, Windows 10 and primary refresh tokens etc.). So deploying ADFS for Azure AD integration is not required at all. They might be other reasons why customers wants to use ADFS (such as a custom MFA provider). But that's rather rare now.
ADFS has an infrastrucutre cost. There are servers, load-balancers, certificates to manage... So if that's not required to get SSO to access "Office 365", why bother...
In addition to what @Pierre Audonnet - MSFT called out, please refer this article which may help you choose the right authentication method for your Azure Active Directory hybrid identity solution. Thanks!