Here I’m assuming that we are using ADFS 2.0, for SSO to O365 services: 1. Active Directory replication issue If AD replication is broken, changes made to user/group may not be in sync across DCs. Between DCs, we may have password/upn/groupmembersip/proxyaddress mismatch that will affect...

Common understanding about SSO: Which may mean user enters username/password once, and does not need to reenter again during the same session. It may also mean that when accessing different application/resources, we need not enter different credentials, but enter the same ones. AD FS 2.0...

The Onmicrosoft.com email address gets stamped the time an Exchange license is assigned to the user. When creating the Onmicrosoft.com email address for the user, we look at the mailNickname attribute value for this user on the cloud. The mailNickName value is derived from 3 places: o From AD,...

Use of SupportMultipleDomain switch, when managing SSO to Office 365 using ADFS When a SSO is enabled for O365 via ADFS, you should see the Relying Party (RP) trust created for O365. Commands that would create the RP trust for O365 are below: New-MsolFederatedDomain -DomainName <domain>...