Back

Set Up Office 365 Single Sign-On Federation with ADFS 2.0

When you set up single signon also known as identity federation your users can sign in with their corporate credentials to access the services in ...

2 min read
Published on Apr 14, 2011
set-up-and-manage-office-365-single-sign-on-federation-with-active-directory-adfs-2-0

When you set up single sign-on (also known as identity federation), your users can sign in with their corporate credentials to access the services in Microsoft Office 365 for enterprises. As part of setting up single sign-on, you must also set up directory synchronization. Together, these features integrate your local and cloud directories.

1. Prepare for single sign-on Learn about the benefits of single sign-on and make sure you meet the requirements before you set it up. Read: Prepare for single sign-on

2. Plan for and deploy Active Directory Federation Services 2.0 Work through the in-depth documentation to deploy and configure AD FS 2.0. Read: Plan for and deploy Active Directory Federation Services 2.0 for single sign-on

3. Install the Microsoft Online Services Identity Federation Management tool Download and run the tool that establishes the trust relationship between your AD FS 2.0 server and Microsoft Office 365 for each of your domains that use single sign-on. Read: Install the Microsoft Online Services Identity Federation Management tool

Windows 32-bit version Windows 64-bit version

4. Verify additional domains Go to the domains page to verify any additional domains that don’t use single sign-on.

5. Prepare for directory synchronization Check prerequisites, including computer requirements and user permissions. Read: Prepare for directory synchronization

6. Activate Active Directory® synchronization Activate directory synchronization to use your local Active Directory to add or remove users and security groups and sync to Microsoft Office 365. After you activate directory synchronization, you cannot deactivate it. Learn more

Activating Active Directory® synchronization allows you to automatically copy users, security groups and other objects from your local Active Directory to Microsoft Office 365. Important: The ability to deactivate Active Directory synchronization is currently not available. Once Active Directory synchronization is activated, synchronized objects may only be edited on-premise.Learn more

7. Install and configure the Directory Synchronization tool Download the Directory Synchronization tool and then configure it to set up synchronization from Active Directory to Microsoft Office 365.

Read: Install the Directory Synchronization tool

8. Verify directory synchronization Make changes to your local Active Directory and verify those changes in Microsoft Office 365. Read: Verify directory synchronization

9. Activate synchronized users Go to the users page, select the “Unlicensed users” view, select all of those users, and then click “Activate synced users”.

  1. Verify and manage single sign-on Sign in to Microsoft Office 365 with your corporate credentials to verify that single sign-on is working. Then learn how to maintain single sign-on and directory synchronization.

Read: Verify and manage single sign-on

Read: Manage directory synchronization Set up and manage single sign-on

This post has matured and its content may no longer be relevant beyond historical reference. To see the most current information on a given topic, click on the associated category or tag.

Related Posts

Is Maintaining a GCC High Tenant Worth It for Non-Government

Evaluating the Need for a GCC High Tenant in Non-Government Organizations

Explore whether maintaining a GCC High tenant is necessary for organizations not involved in government work. Understand the pros and cons, costs, and compliance considerations.

Feb 25, 2025
7 min read
Top 10 Reasons to Partner with an MSP for Security and Compliance

Top 10 Reasons to Partner with an MSP for Security and Compliance

Discover why partnering with an MSP for security and compliance is critical for organizations navigating FAR CUI and CMMC requirements.

Feb 21, 2025
8 min read
DFARS Compliance in Office 365

DFARS Compliance in Office 365

Learn how Microsoft Office 365 GCC High and Azure Government help DOD contractors meet DFARS compliance. Discover the steps to protect CUI and ensure regulatory compliance with Agile IT's expertise.

Feb 13, 2025
7 min read
Understanding DFARS Compliance

DFARS Compliance: A Guide to Federal Cybersecurity Requirements

Learn about DFARS compliance and how it ensures the security of federal data. Explore key requirements, NIST 800-171 alignment, and tips for achieving compliance.

Feb 3, 2025
7 min read
Office 365 License Comparison: Business Plans Vs. E5, E3 and E1

Master Microsoft & CIS Benchmark Best Practices to Secure Your Environment

Discover how to implement Microsoft & CIS Benchmark best practices to strengthen your business security and protect your environment from evolving threats with expert guidance.

Jan 28, 2025
7 min read
Screen Capture Protection in Windows 365

How to Enable Screen Capture Protection in Windows 365 for Enhanced Security

Learn how to enable and use screen capture protection in Windows 365 to secure sensitive information and prevent unauthorized captures, enhancing your organization's data security.

Jan 21, 2025
7 min read

Ready to Secure and Defend Your Data
So Your Business Can Thrive?

Fill out the form to see how we can protect your data and help your business grow.

Loading...
Secure. Defend. Thrive.

Let's start a conversation

Discover more about Agile IT's range of services by reaching out.

Don't want to wait for us to get back to you?

Schedule a Free Consultation

Location

Agile IT Headquarters
4660 La Jolla Village Drive #100
San Diego, CA 92122

Secure. Defend. Thrive.

Don't want to wait for us to get back to you?

Discover more about Agile IT's range of services by reaching out

Schedule a Free Consultation