Forum Discussion

Tin Contributor

Mar 12, 2018

Solved

Using existing external ADFS infrastructure with New office 365 setup

Dear Team I am currently wotking with a customer on an office 365 migration. 1. Currently customer has an exising ADFS 2.0 Infrastructure with endpoint say sts.domainA.com. domainA is only available...

Azure AD

office 365

Victor bassey
Mar 13, 2018
Thanks Dominic for the response. Is split-brain dns a requirement for exchange online hybrid deployment? Can you shed more light on the impact of not using split dns?

Yhank you once again.

victor

Dominik Hoefling

MVP

Mar 13, 2018

1. Yes. You can use sts.domainA.com for every federated domain.

2. You should use split-brain DNS, this is a recommendation and best practices using AD FS and Office 365, also if you are plan to use Exchange hybrid.

3. No, you can use a single AD FS instance.

Best,

Dominik

Victor bassey

Tin Contributor

Mar 13, 2018

Thanks Dominic for the response. Is split-brain dns a requirement for exchange online hybrid deployment? Can you shed more light on the impact of not using split dns?

Yhank you once again.

victor

Dominik Hoefling
MVP
Mar 14, 2018
Not a requirement, but recommended. All your network traffic is going from external via proxy to your internal servers. This requires excellent latency and bandwidth, especially if a lot of your users login to ad fs from external via proxy.

Some companies have no split-brain dns as well, but they do some routing-tricks at the load balancer or proxy to re-route specific client ips directly to internal ...