在 Azure Active Directory 中验证域名 [英] Verify a domain name in Azure Active Directory

问题描述

我已将域名添加到我的 Azure Active Directory 帐户，但它显示该域名未经验证.

I have added a domain name to my Azure Active Directory account, but it says that the domain name is unverified.

为了验证域名，我进入我的默认目录"并进入域"选项卡，在那里我可以看到我的whatever.com 域名已列出.我单击它以突出显示它，然后单击底部栏中的验证"按钮，然后弹出一个框:为单点登录配置域"，告诉我转到目录集成页面并完成所有步骤..." 还有一个复选框，要求现在将我带到目录集成页面.就是这样，除了右下角的勾号按钮.

In order to to verify the domain name, I go into my 'default directory' and go to the 'Domains' tab, where I can see my whatever.com domain name listed. I click it to highlight it and then click on the Verify button at the bottom bar and a box pops up: 'Configure domain for single sign-on', telling me to go to the "Directory Integration page and complete all steps..." There's also a checkbox, asking to take me to the Directory Integration page now. And that's it, except for the tick button in the bottom right.

我唯一的选择是发送到目录集成"页面，其中包含指向其他网页的帮助主题，这些网页不一定反映我在 Azure 门户中看到的内容，就验证域名而言.

The only option I have, is to be sent to the Directory Integrations page, with help topics that point to other web pages that do not necessarily reflect what I'm seeing inside the Azure Portal, in terms of verify domain names.

我知道我需要在我已经购买的域名上创建一个 TXT 记录，并且我可以从其他屏幕截图中看到我需要在 Azure(某处)中找到一个值为MS=xxxxxx"的值但事实证明，要找出从哪里获得该价值是很困难的.

I understand that I need to create a TXT record on the domain name I have already purchased, and I can see from other screenshots that I need to find a value within Azure (somewhere) that has the value 'MS=xxxxxx' but finding out where to get that value from is proving difficult.

我是不是找错地方了?

推荐答案

在当前版本的管理门户中，只有不勾选我计划配置此域为单机"选项时才会显示必要的验证信息登录...".

In the current version of the management portal, the necessary verification information is only displayed if you do not check the option for "I plan to configure this domain for single sign-on...".

如果您添加域但未选中该选项，对话框的下一步将显示您需要在 DNS 服务器上注册为 TXT 条目的 MS=xxxxxxxxx 值.

If you add the domain and leave that option unchecked, the next step of the dialog will display the MS=xxxxxxxxx value that you need to register as a TXT entry on your DNS server.

我认为，当您选择单点登录时它不显示的原因是该值是作为 AD FS 配置(或您将部署的任何 STS 实现)的一部分检索的.

I believe the reason it's not displayed when you opt for single sign-on is that the value is meant to be retrieved as part of the AD FS configuration (or whichever STS implementation you will be deploying).

查看这篇文章:快速入门指南用于将单个林本地 Active Directory 与 Windows Azure AD 集成

特别是您可能正在寻找 Get-MsolDomainVerificationDnscmdlet.

In particular you are probably looking for the Get-MsolDomainVerificationDns cmdlet.

我目前没有 AD FS 部署来验证这一点，但如果两个设置之间的 TXT 值不同，我会感到非常惊讶，所以我会尝试的第一件事是从屏幕获取值未选择单点登录并将其添加到您的 DNS 区域.

I don't have an AD FS deployment to verify this on currently, but I'd be very surprised if the TXT values differ between the two setups, so the first thing I would try is grabbing the value from the screens when the single sign-on is not selected and adding it to your DNS zone.

希望这会为您指明正确的方向.

Hopefully, this points you in the right direction.

一篇涵盖更新管理门户的更新文章现已发布:添加自定义域名到 Azure Active Directory

An updated article covering the updated management portal is now available: Add a custom domain name to Azure Active Directory

这篇关于在 Azure Active Directory 中验证域名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！