Questions regarding on-prem MFA integrated with on-prem Azure and credentials

Question

I need to change the credentials used by MFA ADFS Adapter on my on-prem ADFS farm. The farm consists of 3 Windows Server 2016 systems using a WID database. Would it just be a matter of updating the relevant config file and running the registration cmdlet again or would the adapter need to be un-registered first? If it needs to be un-registered, would any access control policies be affected by un-registering in that case?

Answer 1

Hi
Rice, Kevin J

I think its better to start with unregistering the existing MFA ADFS Adapter. This can be done using a PowerShell cmdlet provided by the MFA solution.

and yes unregistering an authentication, such as an MFA adapter, in ADFS can potentially affect access control policies.

Unregister-AdfsAuthenticationProvider -TypeName <AdapterTypeName>

Theb Update the relevant config files with the new credentials. likw the MFA Adapter configuration file and any other config files associated with your MFA solution.

lastly Register the MFA Adapter again with the updated credentials.

Register-AdfsAuthenticationProvider -TypeName <AdapterTypeName> -Name <AdapterName>

If this helps kindly accept the answer thanks much.