Migrate Office 365 domain federation

Question

We're about to migrate one Office 365 domain from our old SAML federation to a new ADFS setup, however, when trying to update the domain, we get the following error:

PS C:\Windows\system32> Update-MsolFederatedDomain -DomainName example.com -SupportMultipleDomain
Update-MsolFederatedDomain : 'example.com' is not a valid domain name.
At line:1 char:1
+ Update-MsolFederatedDomain -DomainName example.com -SupportMulti ...
+ ~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~~
    + CategoryInfo          : NotSpecified: (:) [Update-MsolFederatedDomain], FederationException
    + FullyQualifiedErrorId : InvalidDomainName,Microsoft.Online.Identity.Federation.Powershell.UpdateFederatedDomainC
   ommand

Do I need to break the current federation by converting the domain to managed before try to federate again?

Answer 1

Hello @Robin H

Yes, you would need to first convert the domain to standard using Convert-MsolDomainToStandard cmdlet for managed authentication. Make sure you specify -SkipUserConversion:$true with Convert-MsolDomainToStandard cmd as you will be converting the domain to federated again. Then convert the domain back to federated again using Convert-MsolDomainToFederated cmdlet as the relying party needs to be created on your new ADFS Setup.

-----------------------------------------------------------------------------------------------------------

Please "Accept the answer" if the information helped you. This will help us and others in the community as well.