Forum Discussion
Office 365 authentication with single tenant and multiple forests without AD trusts
Hi,
We have the following situation:
- 3 dedicated forests
- 1 Office 365 tenant
- AD trusts are not possible because of duplicated NETBIOS names
I know that we can use Azure AD Connect (1 instance) for alle 3 domains without trusts but what is about authentication? As far as I know AD FS and Pass-Through Authentication need AD trusts between the forests? What possible authentication scenarios are available for that environment (without AD trusts)?
Kind regards
Patrick
If you cannot establish trusts between your forests then you will have to federate them separately, deploying different ADFS for each forest. After that you can establish different trusts with Azure AD:
9 Replies
If you cannot establish trusts between your forests then you will have to federate them separately, deploying different ADFS for each forest. After that you can establish different trusts with Azure AD:
Hi,
Thanks for your reply. That sounds good. Do you know if it is also working with Pass-Through Authentication?
Kind regards
Patrick
No, sorry. Pass-through authentication requires Trust between your forests.
