Forum Discussion

Lee chungdu's avatar
Lee chungdu
Copper Contributor
Jul 04, 2018

ADFS Claim Rule - If UPN with .co.kr domain, then send '.com' domain to Active Directory, Possible?

Hello,    1. I'm using Active Directory (on-prem) with abc.com domain, but it's not verified. 2. I already synced with AAD and the AAD has a verified domain(abc.co.kr) 3. UPN from on-prem AD had ...
Authentication
exchange
office 365
security
Nestori Syynimaa's avatar
Nestori Syynimaa
MVP
Jul 05, 2018
  1.  When you enter 1@abc.co.kr it gets directed to ADFS - the domain part here is only used for that.
  2. In ADFS you need to use your internal username 1@abc.com because the authentication is performed against your on-premises AD
  3. If you haven't configured manually otherwise, ADFS sents userprincipalname 1@abc.com to Office 365. However, this doesn't matter, because Office 365 is using only the ImmutableId attribute to identify users, so no need to change claim issuance rules.

 

So, if you're having the error in phase 2., just use the 1@abc.com to login.

Resources