验证在Azure中的Active Directory域名 [英] Verify a domain name in Azure Active Directory

问题描述

我添加了一个域名我的Azure Active Directory帐户，但它说，域名是未经证实的。

I have added a domain name to my Azure Active Directory account, but it says that the domain name is unverified.

为了验证域名，我进入我的默认目录，并进入域选项卡，在这里我可以看到我whatever.com域名上市。我点击它选中它，然后点击确认按钮，底部酒吧和一个对话框弹出：配置域单点登录，告诉我去了目录集成页面，并完成所有步骤... 还有一个复选框，要带我去的目录集成页面现在。就是这样，除了在右下方剔按钮。

In order to to verify the domain name, I go into my 'default directory' and go to the 'Domains' tab, where I can see my whatever.com domain name listed. I click it to highlight it and then click on the Verify button at the bottom bar and a box pops up: 'Configure domain for single sign-on', telling me to go to the "Directory Integration page and complete all steps..." There's also a checkbox, asking to take me to the Directory Integration page now. And that's it, except for the tick button in the bottom right.

我唯一的选择，就是被送到目录集成页面，以帮助主题指向其他网页，不一定反映我所看到的在Azure门户里面，验证域名的条款。

The only option I have, is to be sent to the Directory Integrations page, with help topics that point to other web pages that do not necessarily reflect what I'm seeing inside the Azure Portal, in terms of verify domain names.

我知道我需要创建我已经购买了域名TXT记录，我可以从我需要找到在Azure的（地方），有值MS = XXXXXX'值等的截图看但要找到从何处获取该值从被证明是困难的。

I understand that I need to create a TXT record on the domain name I have already purchased, and I can see from other screenshots that I need to find a value within Azure (somewhere) that has the value 'MS=xxxxxx' but finding out where to get that value from is proving difficult.

我是找错了地方吗？

推荐答案

在管理门户的当前版本，如果你不检查的选项进行必要的核实信息只显示我计划配置这一领域单登录......

In the current version of the management portal, the necessary verification information is only displayed if you do not check the option for "I plan to configure this domain for single sign-on...".

如果您添加域和离开该选项选中，对话框将显示你需要为你的DNS服务器上的TXT进入注册MS = XXXXXXXXX值。下一步

If you add the domain and leave that option unchecked, the next step of the dialog will display the MS=xxxxxxxxx value that you need to register as a TXT entry on your DNS server.

我相信原因，当你选择一个它不显示登录是该值意味着要取出作为AD FS配置的一部分（或任何STS，你将部署实施）。

I believe the reason it's not displayed when you opt for single sign-on is that the value is meant to be retrieved as part of the AD FS configuration (or whichever STS implementation you will be deploying).

看看这篇文章：<一href=\"http://social.technet.microsoft.com/wiki/contents/articles/16226.quick-start-guide-for-integrating-a-single-forest-on-$p$pmises-active-directory-with-windows-azure-ad.aspx#_Toc345406110\">Quick入门指南集成单个林开 - premises使用Windows Azure AD活动目录

在特定你可能寻找 GET-MsolDomainVerificationDns cmdlet的。

In particular you are probably looking for the Get-MsolDomainVerificationDns cmdlet.

我没有一个AD FS部署当前要验证这一点，但我会很惊讶，如果这个TXT值两者之间设置不同，所以我想尝试的第一件事就是从屏幕上抓时的价值单点登录不选择并将其添加到您的DNS区域。

I don't have an AD FS deployment to verify this on currently, but I'd be very surprised if the TXT values differ between the two setups, so the first thing I would try is grabbing the value from the screens when the single sign-on is not selected and adding it to your DNS zone.

希望这点你在正确的方向。

Hopefully this points you in the right direction.

这篇关于验证在Azure中的Active Directory域名的文章就介绍到这了，希望我们推荐的答案对大家有所帮助，也希望大家多多支持IT屋！