Office 365 – AD FS Authentication Fails Due To Time Skew
I’ve run across this issue enough times now that I figured it was worth a short post. It’s a quick reminder to always check the simple things. On several occasions I’ve found AD FS environments where...
View ArticleOffice 365 – AD FS Authentication Fails Due To Token Size
As a follow up to last week’s post on an AD FS issue (Office 365 – AD FS Authentication Fails Due To Time Skew), I figured it was a good time to post another AD FS authentication issue I ran across...
View ArticleOffice 365 – Configuring AD FS & DirSync with an Alternate Login
When deploying AD FS for Office 365, the ideal deployment scenario is to have the userPrincipalName (UPN) value in Active Directory configured to match the user’s email address; at a minimum, your UPN...
View ArticleOffice 365 – Replacing the SSL Certificate in AD FS 3.0
The release of Windows Server 2012 R2 brought with it a new version of AD FS (unofficially referred to as AD FS 3.0). This version of AD FS was a deviation from previous versions in that it no longer...
View ArticleOffice 365 – DirSync Password Sync: Did You Know?
Microsoft added the “Password Sync” option to DirSync in June 2013 and in the past year it has become a viable alternative to AD FS due to its fewer on-premises infrastructure dependencies. The...
View ArticleOffice 365 – Using Password Sync as a Backup to AD FS
For organizations that deploy AD FS for single sign-on with Office 365, it is as critical of a component as their on-premises Active Directory. While you may have your mailboxes residing in Exchange...
View ArticleOffice 365 – The Limitations of Alternate Login ID
Back in April of 2014, Microsoft announced a feature called “Alternate Login ID” (sometimes referred to as “Alternative Login ID”). The idea was that instead of changing the UPNs in your on-premises...
View ArticleOffice 365 – How to Request a SHA-2 Certificate in AD FS 3.0
Just a quick post today on something that should be more simple than it is… AD FS on Windows Server 2012 R2 (often referred to as “AD FS 3.0″) no longer has a dependency on IIS. One of the common...
View ArticleOffice 365 – When to Consider a Third-Party Identity Provider
Office 365 offers several different identity options. Well known are the options to use “cloud identities” or directory synchronization from your on-premises Active Directory. For authentication,...
View ArticleOffice 365 – SSL Certificate Maintenance Tasks To Plan For
It should come as no surprise that Office 365, being a secure service, has a number of SSL certificates in play. Some are owned and managed by Microsoft and some, depending on your on-premises...
View Article
More Pages to Explore .....