Installing and configuring the synchronization and federation environment

In this section, we provide guidance on implementing the basic synchronization and federation environment. We start with a simple infrastructure that just consists of the Identity Bridge, the Web Application Proxy, and small applications to show the main principles in practical use scenarios.

Preparing the group management service account - GMSA

Use the following steps to prepare the group management service account:

  1. Log on to the Domain Controller ADS01 with the following credentials:
    • Username: Domain\AdminAccount
    • Password: YourPassword
  2. Open a Windows PowerShell prompt with evaluated rights and enter:
    Add-KdsRootKey -EffectiveTime (Get-Date).AddHours(-10)

Installing AD FS on ...

Get Mastering Identity and Access Management with Microsoft Azure now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.

Start your free trial