Disable federation on custom domain and AD Connect

Satyanarayan Bhat 6 Reputation points
2021-06-09T06:08:46.327+00:00

I was doing POC to test delegated access. I did the following steps.

1) Created VM in Azure and added ADFS within
2) Successfully configured Azure AD with this ADFS to enable Federation. Confirmed that user getting synced from ADFS to Azure AD
3) The verified custom domain(myDomain.co.in) got federation option enabled. And myDomain.onmicrosoft.com became Primary domain.

Now I would like to change it to following step.

  1. I would like to change myDomain.co.in as Primary domain(Not allowed because it is federated)
  2. Changed FS to PHS/PTA as guided to disable federation.
  3. When I login to user@mydomain.co.in it redirects with adfsurl/adfs/ls which gives error "Page can't be displayed"

Note: As of now Office 365 not installed in ADFS.

Can you please let me know how to remove federation from main custom domain(myDomain.co.in) and AD Connect in Azure AD?

Regards,
Sathya

Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
1,203 questions
Microsoft Entra ID
Microsoft Entra ID
A Microsoft Entra identity service that provides identity management and access control capabilities. Replaces Azure Active Directory.
19,690 questions

1 answer

Sort by: Most helpful
Most helpful Newest Oldest
  1. Pierre Audonnet - MSFT 10,166 Reputation points Microsoft Employee
    2021-12-01T03:03:57.533+00:00

    2) Successfully configured Azure AD with this ADFS to enable Federation. Confirmed that user getting synced from ADFS to Azure AD

    I guess you mean users are getting sync from AD DS to Azure AD through Azure AD Connect. Maybe I am being a bit finicky here, but all these are not only different products/features, they are totally different concepts.

    You need to convert your domain first, removing your AD FS servers won't do anything on the configuration in Azure AD. You can do that with:

    Set-MsolDomainAuthentication -Authentication Managed -DomainName user@mydomain.co.in

    It is from the MSOL PowerShell module: https://learn.microsoft.com/en-us/powershell/azure/active-directory/install-msonlinev1?view=azureadps-1.0

    It takes few minutes to be effective.

    0 comments