Скачать или смотреть Understanding Azure AD and ADFS Authentication Without Synchronization

Discover how to authenticate users through on-premise ADFS servers in Azure without syncing to Azure AD, and learn alternative connectivity options.
---
This video is based on the question https://stackoverflow.com/q/65497462/ asked by the user 'George Rosword' ( https://stackoverflow.com/u/1286032/ ) and on the answer https://stackoverflow.com/a/65526796/ provided by the user 'AlfredoRevilla-MSFT' ( https://stackoverflow.com/u/5562372/ ) at 'Stack Overflow' website. Thanks to these great users and Stackexchange community for their contributions.

Visit these links for original content and any more details, such as alternate solutions, latest updates/developments on topic, comments, revision history etc. For example, the original title of the Question was: Azure AD - ADFS accounts without synchronization

Also, Content (except music) licensed under CC BY-SA https://meta.stackexchange.com/help/l...
The original Question post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license, and the original Answer post is licensed under the 'CC BY-SA 4.0' ( https://creativecommons.org/licenses/... ) license.

If anything seems off to you, please feel free to write me at vlogize [AT] gmail [DOT] com.
---
Exploring Azure AD and ADFS Accounts Without Synchronization

In the world of cloud computing, integrating various services can sometimes be a challenge. One common question that arises for organizations using Azure Active Directory (Azure AD) and Active Directory Federation Services (ADFS) is whether user accounts can authenticate through ADFS in Azure without importing these users into Azure AD. Let's dive into this topic to understand the limitations and possible solutions.

The Problem at Hand

You might be wondering:

Can users be authenticated through an on-premise ADFS server in Azure without importing them to Azure AD? It’s crucial to know if there’s a way to leverage existing ADFS infrastructure without duplicating user accounts in Azure AD.

Are there alternatives to Azure AD Connect for establishing a connection between the ADFS server and Azure AD? This concern arises especially when access to the physical ADFS server is restricted, making the installation of Azure AD Connect impossible.

The Clear Answer

Let’s break down the answers to these questions for a clearer understanding:

1. Importing Users is Necessary

The short answer to the first question is no. In order for users to utilize Azure resources, they need to be imported into Azure AD. This is because:

Azure IDs: Only users with Azure IDs can access Azure resources. When users are authenticated through ADFS, they still need to be represented in Azure AD to facilitate access to these cloud services.

Identity Management: Importing users ensures a unified identity management solution across both on-premise and cloud platforms.

2. Establishing Connection Without Azure AD Connect

You may find yourself unable to install Azure AD Connect due to a lack of access to the physical ADFS server. Fortunately, there are some points to consider:

Admin Credentials Requirement: Azure AD Connect requires Windows Active Directory admin credentials. While you don’t need to install it directly on ADFS servers, you do need access to the domain controller that manages those ADFS servers to make the necessary configurations.

No Direct Alternatives: Unfortunately, if Azure AD Connect can't be installed, there aren't many alternatives that can be pursued for establishing authentication links between ADFS and Azure AD. Without the proper credentials or access, the options become very limited.

Conclusion

In summary, to leverage ADFS for Azure authentication without syncing accounts to Azure AD is not feasible since Azure IDs are required for access to cloud resources. Additionally, without being able to install Azure AD Connect due to credential limitations, organizations may need to consider alternative strategies like gaining access or re-evaluating their identity management solutions.

If you have further questions on this topic or need assistance in exploring alternative paths for identity management with Azure and ADFS, don't hesitate to reach out! It’s essential to have a solid strategy as you navigate the cloud landscape.