question

EnterpriseArchitect avatar image
EnterpriseArchitect asked ·

Configuring Multiple UPN SSO with Azure AD and ADFS (4.0) 2016 to enable user login once via browser to all M365 services ?

People,

I'm currently using Hybrid OnPremise AD-AzureAD Sync and ADFS (4.0) 2016.
AD is single Forest domain.

I have multiple UPN for different users spread across multiple locations. as per https://portal.azure.com/#blade/Microsoft_AAD_IAM/ActiveDirectoryMenuBlade/AzureADConnect, there are 20+ domains verified with green tick already, those are consists of smaller subsidiaries and sister companies.

  1. User1.Last@domain.com

  2. User2.Last@company1.net

  3. User3.LastName@Corp.org

  4. ...

I wonder if this is the right steps to follow as per: https://docs.microsoft.com/en-us/azure/active-directory/hybrid/how-to-connect-install-multiple-domains Because when I execute the command:

$Cred = Get-Credential
Connect-MSOLservice -Credential $Cred

Get-MsolDomainFederationSettings -DomainName 'myCompany.com'

There is no result at all? or blank

Thank you in advance.


adfsazure-ad-connectazure-ad-authentication-protocolsazure-ad-hybrid-identity
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

amanpreetsingh-msft avatar image
amanpreetsingh-msft answered ·

Hi @EnterpriseArchitect

You will get results for the cmdlet Get-MsolDomainFederationSettings -DomainName myCompany.com only after you run Convert-MsolDomainToFederated -DomainName myCompany.com -SupportMultipleDomain cmdlet and the domain is successfully converted to federated domain. Below is the screenshot of how the output should look like:

12423-untitled.png

Could you please confirm that the domain 'myCompany.com' appears as federated domain in Azure Portal. Also, make sure you you are using admin account to run the cmdlet. If the domain is still a managed domain, you will not get any results for the Get-MsolDomainFederationSettings cmdlet.

12495-untitled1.png


Please do not forget to "Accept the answer" wherever the information provided helps you. This will help others in the community as well.


untitled.png (57.6 KiB)
untitled1.png (4.8 KiB)
Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

EnterpriseArchitect avatar image
EnterpriseArchitect answered ·

@amanpreetsingh-msft where in the Azure portal can I see that screenshot about the domain federated checkboxes?


2 comments Share
10 |1000 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

@EnterpriseArchitect You can see that under Azure AD > custom domains.

0 Votes 0 · ·

Hello @EnterpriseArchitect, Have you had a chance to test it out? Feel free to tag me in your reply if you have any question.

0 Votes 0 · ·