With ADFS 4, you can easily enable device authentication as authentication method. This authentication method was already available in ADFS 3 but only as additional authentication method; with ADFS 4 this becomes also available as primary authentication method. Upgrade Active Directory Federation schema This step is required if already have deployed a previous version […]
ADFS 4 – Enable device authentication method Read More »
One of the improvements with ADFS 4 (on Windows Server 2016) is the integration of Azure MFA as multi factor authentication method as well as primary authentication method; you can still use the certificate based or the Azure MFA Server (see http://blog.hametbenoit.info/2014/08/18/azure-use-windows-azure-multi-factor-authentication-to-secure-your-on-premises-application-and-with-your-adfs/) for the multi factor methods. If you want to enable Azure MFA with
As you may know, a quick way to test your ADFS deployment is to access the idpinitiatedsignon sign page. As usual, I tried it after deploying my new ADFS 4.0 server and… got this error message The resource you are trying to access is not available. Contact your administrator for more information. And the
Windows Server 2016 – ADFS 4 idpinitiatedsignon is disabled by default Read More »
You may already know that ADFS 3.0 (on Windows Server 2012 R2) already supports certificate authentication BUT using a different communication port than 443 (in fact 49443). With ADFS 4.0 (on Windows Server 2016), the certificate authentication can now use the 443 communication port, making thing easier to implement multi factor authentication using user certificate.
Windows Server 2016 – ADFS 4.0 now support certificate authentication on port 443 Read More »
You can now see if OneDrive for Business ‘personal’ space has been provisioned for user, including quota and size limits, from the Office 365 Administration portal. Just logon to the Office 365 Administration portal with a global administrator account, go to the Users\Active Users and select the user you want to check. On the right
As you know you can setup your On Premises Lync/Skype for Business deployment to work in hybrid mode with Skype for Business Online (as you can do with Exchange). That said this configuration is not always as smooth and easy as it is for Exchange and you may ended with issues. Knowing that Microsoft has
It has been announced at the Ignite Conference at Atlanta. A preview of the new OneDrive for Business client is now available. The following are part of the improvements coming with the new version – some have been long waited: Ability to sync SharePoint Online document libraries – until then you were still obliged to
Office 365 – Preview of the new OneDrive for Business client Read More »
A new feature is being rolled out (first tenant and then general availability – expected to be completed by the end of the year) which will notify end-user by mobile push notification (same than the one you get when a new email arrived in your inbox) when someone is sharing content with them using SharePoint
With Office 365 CDN (Content Delivery Network) you can improve the performance when accessing your SharePoint Online tenant by using a geo-distributed caching proxy; only static content (like picture files) is cached. This CDN capability can be a great improvement when accessing content hosted on your tenant when connected from a location far away from
Office 365 – Enable Office 365 CDN for your SharePoint Online tenant Read More »
This procedure applies only for Windows 10 devices which have been configured as Azure AD Joined. From time to time, you may need to access advanced recovery options for your Windows 10 device but these options may failed to work because you are using BitLocker to encrypt your drive. You may already know the procedure
Windows 10 – BitLocker Recovery Key for Azure AD Joined devices Read More »
