Mastering Active Directory - Second Edition

Creating a certificate in an AD FS farm to connect to Azure MFA

First, we need to create a certificate, which will be used by the AD FS farm. This needs to run from the AD FS server:

$certbase64 = New-AdfsAzureMfaTenantCertificate -TenantID 05c6f80c-61d9-44df-bd2d-4414a983c1d4

The preceding command generates the new certificate. TenantID is the subscription ID you have from Azure. This can be found by running this:

Login-AzureRmAccount

The preceding command will ask for the credentials for Azure and once we provide them, it will list TenantId:

This will create a certificate under Certificates (Local Computer):