AzureAD login and ADFS for O365 question

[Martin Meraner]

I'd like to get some input on the following situation.

We are running a hybrid setup with ADConnect (password sync) and ADFS (federated domain hence).

For the future we would like to have password reset at Azure AD site.

I strongly think we will need Azure Premium for the password writeback and self-service password reset.

Questions that come to my mind are:

- preferably I would keep ADFS for inhouse users (domain joined PCs), they just log onto the computer to get access to mail etc. Is that possible and still have Azure AD password management?

- how is the above influenced should we start to use Intune and join computers to AzureAD (and not to the on-premise AD)?

Thanks for your input

[#2]

What's the requirement for ADFS?

[#3 · Accepted solution]

As @Warwick Ward mentioned, you might want to evaluate the use of AD FS, and I would add to that the need to purchase additional licensing. AD FS can also offer password reset/change functionality, sans the need for Azure AD Premium licenses. To answer the question, yes, you can have password writeback in federated scenarios.

Pass-through auth/SSO can offer experience very similar to AD FS, without the overhead of additional servers. However, that's only relevant to O365, if you are using the AD FS server to fedetate with other parties, you might not be able to get similar experience with Azure AD.