As Office 365 gains popularity and companies begin to approach truly hybrid deployments with technologies like SSO and ADFS the need to understand how it all integrates is much more important.
It’s a long standing practice for administrators to name new AD Domains with non routable suffixes (enterprise.local) or those that do not reflect their actual .com domain name bur rather the organizational hierarchy (company uses abcwidgets.com for their internet presence but abc.corp.net for their AD.) The reasons for this vary, including simplicity and a misguided effort at increased security. It’s also likely that when the AD infrastructure was originally built, 10+ years in some cases, the idea of connecting the AD to the internet was never considered. This makes sense as Active Directory has been around since Windows 2000 server (1999) whereas ADFS came with WIndows Server 2003 R2 (2005.)
As we know ADFS (and Office 365 components that leverage it) must utilize a publicly routable domain name. Thus our AD Domain for use with ADFS must not be something like .local and we must also ‘own’ the domain (not domain.corp.net as we do not own corp.net.) For many potential adopters of Office 365 this is been too high a burden to bare and has hindered. Fortunately we can use something called domain (UPN) suffixes to add our public .com to our internal AD .local and use all of the goodies ADFS and Office 365 offers us. Microsoft has a TechNet Article on the subject but as usual it’s devoid of any screenshots or further information. Fortunately it’s a very straight forward process which I’ll explain below:
Continue reading ‘Configure Active Directory for Office 365 and ADFS’
