AD FS Windows Server 2012 R2 - Deployment Scenario

Question

I am deploying with following scenario, need your expert advise.
Customer local domain
abc.local
à AD FS servers member of local domain (ADFS1.abc.local,
ADFS2.abc.local). ADFS server farm setup with two server load balanced on F5 (sts.abc.sa),
internal DNS Host name
Customer External Domain
abc.sa
à UPN Suffix Added, all users UPN suffix is changed to abc.sa, external DNS Host (sts.abc.sa)
My Query
1-      
Do I need to change the domain suffix of server before running the Federation PowerShell command or following command will work
Set-MsolADFSContext –Computer FQDN-OF-ADFS_SERVER
(FQDN WITH ABC.LOCAL OR
ABC.SA)
2-      
DO I need to run the above command on second ADFS server part of the farm) or how it works as I notice, the second server though it’s part of the ADFS farm
but not showing the ADFS MMC or responding to STS Metadata URL. Even on F5 NLB the second server is showing down. Is it normal behavior. I read somewhere the second server need to promoted to primary in case first server is unavailable. Please advise.
Adding: the common name of the certificate is sts.abc.sa

Answer 1

Hi,
Do I need to change the domain suffix of server before running the Federation PowerShell command or following command will work
As far as I know, we don’t need to do that, since we can create a corresponding DNS forward lookup zone and add a host record for the ADFS server.
Name resolution requirements for ADFS-enabled Web servers
http://technet.microsoft.com/en-us/library/cc758073(v=WS.10).aspx
In addition, the act of creating two or more federation servers in the same network, configuring each of them to use the same Federation Service, and adding the public key of each server's token-signing
certificates to the AD FS Management snap-in creates a federation server farm.
Quoted from article below:
When to Create a Federation Server Farm
http://technet.microsoft.com/en-us/library/dd807062.aspx
Since we are not very familiar with ADFS, as Mr. X mentioned, there is a dedicated ADFS forum where you can refer to if you have further questions.
Best Regards,
Amy
Please remember to mark the replies as answers if they help and un-mark them if they provide no help. If you have feedback for TechNet Subscriber Support, contact [email protected]