ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field

ADFS (Active Directory Federation Services) Federation Services, where our servers are built new windows server 2016 standard edition, the ADFS version is 4.0, corresponding to different versions of win server version of ADFS is different, not the configuration the same. This article only as a reference of ADFS 4.0.
Here begin ADFS01 configuration.
After opening the management console to add roles and features, check the ADFS server roles
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
have been the next step AD FS can see a brief description and notes
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
to start the installation prompts to complete the installation
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
after the installation is complete now configure ADFS first do not worry, we first need to import certificate information to configure ADFS to use.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Type the password for the private key
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
certificates in the "Personal"
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Click Finish, the import was successful.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Prerequisite begin configuring ADFS, ADFS that must be met, at the bottom we have chosen to create the first federation server.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Specify an account with domain administrator privileges, the configuration is not recommended for direct use administrator account, the best new private account.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Select the certificate we just imported, modify the authentication service name, it is best to adfs as a prefix, a domain name. Display name can be arbitrary, the latter can also be changed.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
A designated escrow account
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
designated database has its own SQL server can specify your own database, we do not have to use an internal database.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Confirmation. Now this ADFS ADFS server ADFS01 on a field in the first server.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Prerequisite for all through.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
The installation is complete.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field


Let's start configuring ADFS02, and add ADFS field.
Install ADFS Services role
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
installation process is the same as before, after the completion of the start configuration. Here below select Add to federation server farm.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Specifies the user
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
to specify the main federation server
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
selection certificate.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Specified managed accounts.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
Confirmation
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
prerequisites through to start the installation.
ADFS achieve with Ali cloud SSO (single sign-management) - ADFS build, build ADFS field
So far, ADFS set up is completed, ADFS field set up.


If the configuration is correct, now we open a portal link in a Web page. ADFS can see the portal page
https://adfs.domiain.com/adfs/ls/idpinitiatedsignon.aspx

Guess you like

Origin blog.51cto.com/13781144/2456066