ADFS SSO for Office365

[rpettit]

Setting up SSO with Office365.

 

When setting up ADFS do you have this as a separate server or add the role onto another server such as domain controller?

 

How many ADFS servers is a recommended for SSO?

[kmount]

Hi,

 

Recommend you look at - https://msdn.microsoft.com/en-us/library/azure/dn151324.aspx

 

In short you probably want 4 if you're doing it properly (ie. proxies in DMZ, main federation servers internally) and have 1000-15000 users but you may find you could do it co-existing on domain controllers for under 1000 but I'd be wary of this approach if you ever wanted to change your DCs you need to move ADFS etc.

 

All explained in the link above.

[pow]

I installed it on my 2nd DC and have a separate DMZ proxy (as best practice says to have that off domain). No drop in performance what so ever, I have 150 staff that use it.