AADC和联合信任配置问题 [英] AADC and federated trust configuration issue

问题描述

我在Server 2016测试实验室中正在使用有效的ADFS和WAP配置.我正在使用Azure AD Free版本.我正在使用最新的AADC下载.

I've a working ADFS and WAP configuration in my Server 2016 test lab. I'm using Azure AD Free edition. I'm using the latest AADC download.

我可以成功安装和配置AADC以进行目录同步，但是当我尝试选择联合信任"选项(使用本地AD)时，安装运行正常，但是我收到错误消息:

I can successfully install and configure AADC for directory sync but when I attempt to choose the Federated Trust option (with my on-prem AD) the installation runs through fine but I receive the error:

'Azure Active Directory和AD FS的信任创建失败.在解决此问题之前，某些用户可能无法登录.再次启动向导，然后选择联合Azure AD域以创建信任".

'Trust creation failed for Azure Active Directory and AD FS. Some users may not be able to log in until this is resolved. Launch the wizard again and select Federate an Azure AD domain to create the trust'.

所有外部和内部DNS条目均已就绪.

All external and internal DNS entries are in place.

如果我重新运行向导并选择重置信任"选项，则即使我提供了正确的凭据，该过程也会由于无法连接到主AD FS服务器"错误而失败.

If I rerun the wizard and choose the Reset Trust option the process fails because of a 'Failed to connect to primary AD FS server' error even though I'm providing correct credentials.

Azure AD Free版是否允许您创建联合身份验证信任?我知道Azure AD Health无法与AD Free一起使用.

Does the Azure AD Free edition allow you to created a federation trust? I know that Azure AD Health doesn't work with AD Free.

AADC为什么不创建联盟信任?

Why isn't AADC creating the federation trust?

非常感谢，

塞恩

推荐答案

AD FS不依赖于Azure AD许可级别.检查日志中是否有任何错误详细信息，或者以老式方式联合域: https://docs.microsoft.com/zh-CN/powershell/module/msonline/convert-msoldomaintofederated?view=azureadps-1.0

There is no dependence on the Azure AD licensing level for AD FS. Check the logs for any error details, or federate the domain the old fashioned way: https://docs.microsoft.com/en-us/powershell/module/msonline/convert-msoldomaintofederated?view=azureadps-1.0

这篇关于AADC和联合信任配置问题的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！