The first step is to make sure that the Microsoft Azure Active Directory PowerShell Module is installed.In the following six steps I will name the required cmdlets and explain the actions that it will perform. The easiest method to create this trust is to use PowerShell. This trust will make sure that the Microsoft Azure AD will trust the authentication response of the on-premises AD FS. In a maximum of six relatively simple steps it is possible to create a relying party trust between the on-premises AD FS and the Microsoft Azure AD. When all the prerequisites are in place, it’s time to start with creating the federation. The Windows Azure Active Directory Sync tool is installed and configured.Web Application Proxy is installed and configured.The (public) domain name, used for the UPN, is configured in Microsoft Intune.A (public) UPN is available and configured in Active Directory.A Microsoft Intune subscription is available.To be able to configure a relying party trust between the on-premises AD FS and the Microsoft Azure AD make sure that following installations and configurations are in place: PrerequisitesĪ few important installations and configurations should be in place before trying to use the configuration mentioned further in this post. If that’s not the case, please let me know.

I assume that those steps are more common knowledge. The best thing about this is that after this configuration is done, all Microsoft Intune authentication requests will redirect to the on-premises AD FS.Īlso, in this post I will skip a few important steps (see prerequisites). In this blog post I will show how relatively easy it is to federate on-premises Active Directory Federation Services (AD FS) with the Microsoft Azure Active Directory (Micorosoft Azure AD).

The main reasons for that request are simple, it’s to make the user experience better and to prevent the user from having different accounts and passwords. One of the things that is often requested by customers is to configure single sign-on for Microsoft Intune (with or without ConfigMgr integration).

Adfs azure mfa