You signed in with another tab or window. Reload to refresh your session.You signed out in another tab or window. Reload to refresh your session.You switched accounts on another tab or window. Reload to refresh your session.Dismiss alert
Copy file name to clipboardExpand all lines: articles/active-directory/hybrid/how-to-connect-fed-management.md
+15-15Lines changed: 15 additions & 15 deletions
Display the source diff
Display the rich diff
Original file line number
Diff line number
Diff line change
@@ -28,16 +28,16 @@ You'll also learn about other common AD FS tasks that you might need to perform
28
28
| Task | Description |
29
29
|:--- |:--- |
30
30
|**Manage AD FS**||
31
-
|[Repair the trust](#repair-the-trust)|Learn how to repair the federation trust with Microsoft 361. |
32
-
|[Federate with Azure AD by using an alternative sign-in ID](#federate-with-azure-ad-by-using-alternateid)| Learn how to configure federation by using an alternative sign-in ID. |
33
-
|[Add an AD FS server](#add-an-ad-fs-server)|Learn how to expand an AD FS farm with an extra AD FS server. |
34
-
|[Add an AD FS Web Application Proxy (WAP) server](#add-an-ad-fs-wap-server)|Learn how to expand an AD FS farm with an additional WAP server. |
35
-
|[Add a federated domain](#add-a-federated-domain)|Learn how to add a federated domain. |
31
+
|[Repair the trust]((#repairthetrust) |Learn how to repair the federation trust with Microsoft 361. |
32
+
|[Federate with Azure AD by using an alternative sign-in ID](#alternateid)| Learn how to configure federation by using an alternative sign-in ID. |
33
+
|[Add an AD FS server](#addadfsserver)|Learn how to expand an AD FS farm with an extra AD FS server. |
34
+
|[Add an AD FS Web Application Proxy (WAP) server](#addwapserver)|Learn how to expand an AD FS farm with an additional WAP server. |
35
+
|[Add a federated domain](#addfeddomain)|Learn how to add a federated domain. |
36
36
|[Update the TLS/SSL certificate](how-to-connect-fed-ssl-update.md)| Learn how to update the TLS/SSL certificate for an AD FS farm. |
37
37
|**Customize AD FS**||
38
-
|[Add a custom company logo or illustration](#add-a-custom-company-logo-or-illustration)|Learn how to customize an AD FS sign-in page with a company logo and illustration. |
39
-
|[Add a sign-in description](#add-a-sign-in-description)|Learn how to add a sign-in page description. |
40
-
|[Modify AD FS claim rules](#modify-ad-fs-claim-rules)|Learn how to modify AD FS claims for various federation scenarios. |
38
+
|[Add a custom company logo or illustration](#customlogo)|Learn how to customize an AD FS sign-in page with a company logo and illustration. |
39
+
|[Add a sign-in description](#addsignindescription)|Learn how to add a sign-in page description. |
40
+
|[Modify AD FS claim rules](#modclaims)|Learn how to modify AD FS claims for various federation scenarios. |
41
41
42
42
## Manage AD FS
43
43
@@ -74,7 +74,7 @@ You can use Azure AD Connect to check the current health of the AD FS and Azure
74
74
> [!NOTE]
75
75
> Azure AD Connect can repair or act on only certificates that are self-signed. Azure AD Connect can't repair third-party certificates.
76
76
77
-
## Federate with Azure AD by using alternateID
77
+
## <aname="alternateid"></a>Federate with Azure AD by using alternateID
78
78
79
79
We recommend that you keep the *on-premises* User Principal Name (UPN) and the *cloud* User Principal Name the same. If the on-premises UPN uses a non-routable domain (for example, Contoso.local) or can't be changed because of local application dependencies, we recommend setting up an alternative sign-in ID. By using an alternative sign-in ID, you can configure a sign-in experience where users can sign in with an attribute other than their UPN, such as an email address.
80
80
@@ -97,7 +97,7 @@ Configuring an alternative sign-in ID for AD FS consists of two main steps:
97
97
> [!NOTE]
98
98
> For more information about alternateID and steps to manually configure it, see [Configure an alternative sign-in ID](/windows-server/identity/ad-fs/operations/configuring-alternate-login-id).
99
99
100
-
## Add an AD FS server
100
+
## <aname="addadfsserver"></a>Add an AD FS server
101
101
102
102
> [!NOTE]
103
103
> To add an AD FS server, Azure AD Connect requires a PFX certificate. Therefore, you can perform this operation only if you configured the AD FS farm by using Azure AD Connect.
@@ -132,7 +132,7 @@ Configuring an alternative sign-in ID for AD FS consists of two main steps:
132
132
133
133

134
134
135
-
## Add an AD FS WAP server
135
+
## <aname="addwapserver"></a>Add an AD FS WAP server
136
136
137
137
> [!NOTE]
138
138
> To add a Web Application Proxy server, Azure AD Connect requires the PFX certificate. Therefore, you can perform this operation only after you've configured the AD FS farm by using Azure AD Connect.
@@ -166,7 +166,7 @@ Configuring an alternative sign-in ID for AD FS consists of two main steps:
## <aname="addfeddomain"></a>Add a federated domain
170
170
171
171
It's easy to add a domain to be federated with Azure AD by using Azure AD Connect. Azure AD Connect adds the domain for federation and modifies the claim rules to correctly reflect the issuer when you have multiple domains federated with Azure AD.
172
172
@@ -203,7 +203,7 @@ It's easy to add a domain to be federated with Azure AD by using Azure AD Connec
203
203
204
204
The following sections provide details about some of the common tasks that you might have to perform to customize your AD FS sign-in page.
205
205
206
-
## Add a custom company logo or illustration
206
+
## <aname="customlogo"></a>Add a custom company logo or illustration
207
207
To change the logo of the company that's displayed on the **Sign-in** page, use the following Windows PowerShell cmdlet and syntax.
> The *TargetName* parameter is required. The default theme that's released with AD FS is named Default.
218
218
219
-
## Add a sign-in description
219
+
## <aname="addsignindescription"></a>Add a sign-in description
220
220
To add a sign-in page description to the **Sign-in page**, use the following Windows PowerShell cmdlet and syntax.
221
221
222
222
```azurepowershell-interactive
223
223
Set-AdfsGlobalWebContent -SignInPageDescriptionText "<p>Sign-in to Contoso requires device registration. Select <A href='http://fs1.contoso.com/deviceregistration/'>here</A> for more information.</p>"
224
224
```
225
225
226
-
## Modify AD FS claim rules
226
+
## <aname="modclaims"></a>Modify AD FS claim rules
227
227
AD FS supports a rich claim language that you can use to create custom claim rules. For more information, see [The Role of the Claim Rule Language](/previous-versions/windows/it-pro/windows-server-2012-R2-and-2012/dd807118(v=ws.11)).
228
228
229
229
The following sections describe how you can write custom rules for some scenarios that relate to Azure AD and AD FS federation.
0 commit comments