What replaces ADFS

[jblackburnHWGA]

We're planning on removing adfs as we're planning on moving serverless. I have most of this planned and understand it

The bit i don't get is what do i use when i remove adfs

 

Well what's best to use in a school? I'm guessing there is an azure equivalent i just can't pin down the name. Plenty of guidance on how to remove adfs but there is then a mixed list of alternatives. passthrough, hash password and so on

 

Short term i'm still using AD so the AD connect can still run to sync. Longer term i want to remove the AD and domain and run straight from azure and endpoint.

[dmj]

AzureAD, Google both have SAML/OICD implementations.

 

specifically:

https://portal.azure.com/#blade/Microsoft_AAD_IAM/StartboardApplicationsMenuBlade/AllApps/menuId/

Edited October 9, 2020 by dmj

[Norphy]

As already said, Azure AD essentially is a giant ADFS in the sky. It supports SAML, SSO etc. If you're getting rid of your local AD, you don't need to worry about passthrough authentication or passhash synchronisation as all of your Azure AD accounts will be cloud managed.

 

We're using Azure AD as a federated authentication service for various things. The ones that immediately come to mind are:

 

Adobe

Pluralsight

FreshService

Google Apps

 

I'm pretty sure there are more.

[jblackburnHWGA]

Basically then i'm already using azure adfs for a few things as i have Adobe, AccessIT and quite a few other services connecting straight to Azure

If i find out the services we use that are being pushed through ADFS for authentication and move them to azure all I'll needed AD connect for is syncing details with on prem to the cloud until we're at a point where we don't need on prem anymore.