使用AWS实现ADFS3.0

Question

I am new to ADFS implementation, now trying to do some POC to check how ADFS works.

I have created an AWS EC2 instance, Installed AD DS with

Root Domain: branch.tree

Post Domain Changes implemented on EC2, the target server is changed to something like below

adfs.branch.tree.com

After AD DS successfully configured, I have installed and configured ADFS3.0 in the same instance with details as below

Federation Service Name: adfs-sts.branch.tree.com

Now, Do I need to create a subdomain for 'Branch' under tree domain and config this to a load balancer?

How can we make adfs-sts.branch.tree.com/adfs/ls/idpinitiatedsignon.htm available over the internet?

I tried to access the same URL with Public IP, it is accessible but when tried with FQDN it is not accessible.

Answer 1

If it is accessible by IP but not by URL, the first thing you need to check is DNS resolution ( nslookup adfs-sts.branch.tree.com ) and make sure it matches up. If it does, start checking the DNS A and PTR records for bad entries.

Since you are hosting both pieces on AWS you may be using Route 53, so sharing your configuration there would be the next troubleshooting step.