question

RachelN-2332 avatar image
0 Votes"
RachelN-2332 asked ZhengqiLou-MSFT commented

Exchange DAG with ADFS

Hello!

I'm transitioning from a single 2013 Exchange server to two Exchange 2019 servers in a DAG. Currently, I have our 2013 server authenticating OWA and EAC with WAP and ADFS. Can ADFS be configured straight to a DAG or do I need to get a load balancer? Are there any Exchange load balancers out there that are recommended for ADFS and Exchange VMs?

Thanks!

office-exchange-server-administrationadfs
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

1 Answer

AndyDavid avatar image
1 Vote"
AndyDavid answered ZhengqiLou-MSFT commented

You will need some load balanced name or mechanism if you want all the servers to use ADFS auth
It can even be DNS load balancing

https://docs.microsoft.com/en-us/exchange/architecture/client-access/load-balancing?view=exchserver-2019

There is no recommended load balancers for Exchange or ADFS. any will do.
Kemp, F5 etc...

· 1
5 |1600 characters needed characters left characters exceeded

Up to 10 attachments (including images) can be used with a maximum of 3.0 MiB each and 30.0 MiB total.

Hi @RachelN-2332 ,

Good day!

How is it going on? I would agree with Andy, it is suggested to deploy load balancers between WAP and your AD:
https://docs.microsoft.com/en-us/windows-server/identity/ad-fs/deployment/best-practices-securing-ad-fs#standard-deployment-topology

Best regards,
Lou


If the response is helpful, please click "Accept Answer" and upvote it.
Note: Please follow the steps in our documentation to enable e-mail notifications if you want to receive the related email notification for this thread.

0 Votes 0 ·