ADFS - Active Directory Federation Service - Lab setup | 2023

[@dhnaveen]

why did industry required ADFS when AD was already there? Why did Microsoft did not update/improve the "AD Kerberos ticket authentication model" and instead introduced a complete new paradigm of "claim based identity model"

[@ConceptsWork]

Claim based Identity was not introduced by Microsoft, ADFS was the product launched to support adoption of claim based Identity model. Now, claim based Identity was defined as a standard, where in there were multiple products from different vendors. Why Active directory was not matured? - I don't have an exact answer for this, but if we look at this from product capability prospective, AD was not just about authentication, where ADFS is just about authentication and authorization of users and devices(ADFS DRS). With new requirements comes new challenges and the initial product design may not be capable of even handling the maturing required for current implementations. You can also ask one more question why Azure AD when ADFS was there? - Think about it, ADFS was an on prem solution serving authentication for multiple applications right? but then cloud adoption triggered, there was a requirement of solution which can handle authentications in number like trillions. With new requirements, if the maturity model can't be handled by a product every vendors does create a new product all together. Oracle also had on-prem solution but then they also have re-written all the code to give more mature capabilities at cloud scale. I hope I was able to set the context.

[@tarunkhanna1576]

Can ADFS be installed on the domain controller itself where Active Directory is also installed. Can't we just add a role on the same controller and the same server be used as a ADFS as well. Secondly the server which you mentioned which needs to be joined to the windows domain, can it be a windows 2022 Standard edition as the table in your video shows versions till 2019 only.

[@cdm297]

One of the BEST content on ADFS available on the internet. GREAT WORK.

[@leninramachandran8265]

Hi , I have been studying ADFS I have seen lot of video in KZbin but I have not understand, you have explained very clearly I have learnt whatever you have explained thank you so much keep it up..Nice job.:) expecting more video from ADFS.

[@ConceptsWork]

Thanks for the kind words, we will complete this ADFS series in next upcoming 2 weeks.

[@leninramachandran8265]

@@ConceptsWork and also I referred to my friends to watch your channel who's want to learn the ADFS.. Now we are fan of you ☺️ keep rocking..

[@aamirshah27]

Thank you concept works, I have a strong feeling that you would be the reason for my promotion at the office :) Keep up the good work & post something which explains stuff in detail about things like, Kerb tokens, SMAL tokens, WS fed etc

[@ConceptsWork]

Thank you so much for your kind words.

[@khanmohaseen26]

Thank you for your hard work and quality content.

[@thepurrfectcat]

very professionally done. I don't understand what those two didn't find interesting enough to dislike it. yes and want to know more about PKI

[@ashokreddy3153]

This is a gem of work!!! You made it very simple !!!

[@debashispeu]

Really great work done by consept work. Could please make a series for ADCS PKI

[@ConceptsWork]

Thank you!

[@arghya005]

That would really be appreciative.Please make a series on ADCS PKI CRL

[@chakraoracledba6710]

Excellent work you r doing.. Why am I saying this, you know who is r target audience and answer everything.. Need more such videos.

[@ConceptsWork]

Thanks for your kind acknowledgements.

[@ramkumargupta9628]

Thank you !! your video is very informative and visualization is nice and easy to understand the concept of ADFS you are working very hard to share us quality content. Could you please also make a series on ADCS (PKI)

[@ConceptsWork]

We have this in pipeline, but as of we are focused on creating content for complete EMS suite.

[@mahmoudhelal8736]

very valuable info bro, really much appreciated your efforts, please keep it up and move on

[@sahilkashyap2798]

Hello Sir, Hope this message finds you well. Thank you for your kind help and support. All the training videos are too good for us and help us in work. We would request you to please provide us with "Active Directory Certificate Services" playlist as it was promised by you on your one of the training videos. If possible, please provide us with that playlist. Thank you. May God Always Bless you.

[@GurpreetKaur-ps8zr]

Thank you for making learning so simple.

[@TestTest-un7mn]

Awesome video!!!!!!Thank you very much boss!!!

[@ConceptsWork]

Glad you liked it!

[@ehabgalal9181]

Thank you for such videos really appreciate your effort

[@ConceptsWork]

Thank you Ehbab

[@ritesh07dbit]

Thank you very much for your hard work and for clarifying the concepts so well. Appreciated!!!!!

[@ConceptsWork]

Glad it was helpful!

[@dipronildey6345]

Please make a course on SC300 exam certification

[@msayeed78]

Excellent explanation!

[@ConceptsWork]

Glad it was helpful!

[@tarunkhanna1576]

@ConceptsWork Can ADFS be installed on the domain controller itself where Active Directory is also installed. Can't we just add a role on the same controller and the same server be used as a ADFS as well. Secondly the server which you mentioned which needs to be joined to the windows domain, can it be a windows 2022 Standard edition as the table in your video shows versions till 2019 only.

[@matejdzimbeg2978]

thank you

[@Willer2074]

Thanks a lot for your hard work.

[@ConceptsWork]

It's my pleasure

[@TheInsightfulInvestor]

Great , please make such more videos

[@ripanpaul7027]

Beautiful contents.

[@sanjeevbhagat2132]

Excellent video, explained very clearly. Thanks!!

[@ConceptsWork]

Glad it was helpful!

[@nikhil9860]

Can you please make a certificate authority series

[@Lifetraveller]

Awesome work !!

[@swarupkn1599]

Well explained...thanks for detailed explanation, when can we expect Certificate Authority video (PKI)

[@ConceptsWork]

PKI to be very specific might not be covered, as we are completing all security products for now. But we are sure, all the new content will help you in some or the other. happy learning.

[@amlardhi]

Do you have and video that explain what are the difference between ADFS and Azure AD Connect ?

[@PremKumar-dk1zi]

How to plan HA in case of upgrade or parching?

[@nikhilpatil1710]

Nice video... Good explanation... Thank you ☺️

[@ConceptsWork]

Your welcome :-)

[@nashaatmena7687]

thanks for your nice arrangement video

[@bhaskarbavandla4015]

how to know which mode installation done ...on exiting setup...

[@ConceptsWork]

Get-AdfsProperties only work on Primary server, if the installation is done with WID. Instead, Get-Properties shows output on all the servers. As well as Get-AdfsProperties shows the SQL instance name as well.

[@cloudhandle]

Have you made any video on ADCS?

[@ConceptsWork]

Not yet.

[@cloudhandle]

@@ConceptsWork okay..

[@roidelalune01]

Well done !!

[@MrRajparjapat]

Thanks for your kind explanation!!. Please help me to understand some query. 1. What is the default location of adfs database 2. In WID configuration, if primary goes down then how we can recover or how we cN make secondary as primary server. 3. How we can have public certificate. What is the process.?

[@ConceptsWork]

The default location of ADFS database is "C:\Windows\WID\Data", if you are using WID. You can use the command mentioned in this article to make a server Primary ADFS server - docs.microsoft.com/en-us/powershell/module/adfs/set-adfssyncproperties?view=win10-ps For public cert you have to contact any cert provider.

[@tamerabdulhafeez2815]

thanks for info

[@notjoking3404]

awsome...

[@hosseinsabouri3121]

Please upload with 1080p

[@najimabdelwahad4579]

Thank you for your hard work and quality content¨ :-))) thx

[@Ambedkarites_Indian]

Very nice👍

[@ConceptsWork]

Thanks a lot

[@nikhilpatil1710]

I wish to create lab on my laptop windows 7 it is. Can you guide me how can I do it?

[@ConceptsWork]

Send us an email at [e-mail]

[@nikhilpatil1710]

@@ConceptsWork sent

[@k.madhukarreddy6608]

Thanks for the content bro. can u make another video on ADFS with sql instance?

[@ConceptsWork]

The process is same, please review this article - docs.microsoft.com/en-us/windows-server/identity/ad-fs/design/federation-server-farm-using-sql-server and feel free to reach me for any question.

[@nikhil9860]

Subscribed

[@sibgathassan6281]

awesome. but please keep mic bit louder

[@debjyotide723]

is it pre-prequisite to fedarate a onprem domain to O365, AC Connect to be installed in on-prem domain?

[@ConceptsWork]

No federated domain is one of authentication type.

[@k.madhukarreddy6608]

I had a LAB setup with ADFS primary only on Oracle VM, I accidentally deleted the VM without removing ADFS server roles, now I want to install the ADFS again in the same LAB setup before I do so do I need to delete any remaining from the domain controllers

[@ConceptsWork]

The server on which you installed ADFS, was also a DC?

[@sachintak9600]

Do we really require wildcard SSL or it will work normal SSL cert ?

[@ConceptsWork]

SSL should have SAN name entry for federation service name, that's all required.

[@dipronildey6345]

you should be teaching on udemy.

[@iamlearning111]

I am in the process of setting up new ADFS server for my company, I have a wildcard certificate *.abcd.com which is we are using for our company websites. Our domain controller is child.abcd.com and my adfs server name is adfs.child.abcd.com. When I am using my existing wildcard certificate which is *.abcd.com, it does not work with adfs server adfs.child.abcd.com, it gives me error. Please help me how to setup public ssl certificate *.abcd.com for my adfs server. Some of the department users are using UPNs. e.g. instead of [e-mail] we are also using UPN [e-mail] and [e-mail]. I will really appreciate your help and assistant.

[@ConceptsWork]

Can you please mail the error at [e-mail]

[@arunsasiv123]

Can I have your contact ?

[@najimabdelwahad4579]

Thank you for your hard work and quality content¨ :-))) thx