Giter VIP home page Giter VIP logo

identity-reference-architectures's Introduction

Reference architectures for extending your Active Directory environment to Azure

For guidance see the article Choose a solution for integrating on-premises Active Directory with Azure.

For each option, a more detailed reference architecture is available.

AD DS in Azure joined to an on-premises forest

Deploy AD Domain Services (AD DS) servers to Azure. Create a domain in Azure and join it to your on-premises AD forest.

See the reference architecture

AD DS in Azure with a separate forest

Deploy AD Domain Services (AD DS) servers to Azure, but create a separate Active Directory [forest][ad-forest-defn] that is separate from the on-premises forest. This forest is trusted by domains in your on-premises forest.

See the reference architecture

Extend AD FS to Azure

Replicate an Active Directory Federation Services (AD FS) deployment to Azure, to perform federated authentication and authorization for components running in Azure.

See the reference architecture

Integrate your on-premises domains with Azure AD

Use Azure Active Directory (Azure AD) to create a domain in Azure and link it to an on-premises AD domain.

See the reference architecture

identity-reference-architectures's People

Contributors

atoakley avatar bennage avatar jocontr avatar luisgmsft avatar petertaylor9999 avatar rohitsharma-pnp avatar veronicawasson avatar woodp avatar

Stargazers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

Watchers

 avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar  avatar

identity-reference-architectures's Issues

ADFS architecture Deployment Failure

With the new modules released 19 hours ago, I tested again some architecture, the ADFS one failed the first deployment for onprem.json

The fix is a simple update of the xActiveDirectory PS module contained inside the DSC extension zip file (from version 2.16.0.0 to 2.24.0.0).

image

Same error appeared for ADDSForest architecture deploying azure.json .

Refresh Token has expired due to Inactivity

Getting following error while running onprem.json part of "adds-extend-domain" folder -

Error:

AADSTS700082: The refresh token has expired due to
inactivity.�The token was issued on 2019-01-28T08:58:16.7135740Z and was inactive for 90.00:00:00.\r\nTrace ID:
624f7355-f654-4e51-bf41-417b1c4b6200\r\nCorrelation ID: 06fd79c9-fe43-4f61-bb6f-22df21f2c597\r\nTimestamp:
2019-09-27 04:38:50Z","error_codes":[700082],"timestamp":"2019-09-27 04:38:50Z","trace_id":"624f7355-f654-4e51-bf4
1-417b1c4b6200","correlation_id":"06fd79c9-fe43-4f61-bb6f-22df21f2c597","error_uri":"https://login.microsoftonline
.com/error?code=700082"}

InvalidTemplate - publicIPAddressesTemplate

deployment of adds-extend-domain fails with this issue:

{'additionalProperties': {}, 'code': 'InvalidTemplate', 'message': "Deployment template validation failed: 'The template variable 'publicIPAddressesTemplate' is not valid: The language expression property 'templateLink' doesn't exist, available properties are 'template, templateHash, parameters, mode, provisioningState'.. Please see https://aka.ms/arm-template-expressions for usage details.'.", 'target': None, 'details': None, 'additionalInfo': [{'additionalProperties': {}, 'type': 'TemplateViolation', 'info': {'lineNumber': 24, 'linePosition': 193, 'path': 'properties.template.variables.publicIPAddressesTemplate'}}]}

ADFS deployment failed - DSC extension fix

With the new modules released 19 hours ago, I tested again some architecture, the ADFS one failed the first deployment for onprem.json

The fix is a simple update of the xActiveDirectory PS module contained inside the DSC extension zip file (from version 2.16.0.0 to 2.24.0.0).

image

arguments: group deployment create --name bb-05-vmext --subscription a00fa065-34fb-434e-9c0d-97004d175465 --resource-group melqin-adfs-rg --template-uri https://raw.githubusercontent.com/mspnp/template-building-blocks/v2.2.0/templates/buildingBlocks/virtualMachineExtensions/virtualMachineExtensions.json --parameters @e:\adfs\onprem-output-05.json

Similar error appeared for ADDSForest architecture deploying azure.json . for the output 07

vm list-skus --resource-type virtualMachines --zone false

Hello,
tried to follow the steps mentioned on the readme but did run into issues by executing the "azbb" command:

PS C:\Users\<user>\workspace\identity-reference-architectures\adds-extend-domain>azbb -s <my-subscription-id> -g rg-storage -l northeurope -p onprem.json --deploy

  error: error executing az
  message:
  status: null
  arguments: vm list-skus --resource-type virtualMachines --zone false --subscription <my-subscription-id>

PS C:\Users\<user>\workspace\identity-reference-architectures\adds-extend-domain>

QUESTION: What could be the root cause of this error message?

Recommend Projects

  • React photo React

    A declarative, efficient, and flexible JavaScript library for building user interfaces.

  • Vue.js photo Vue.js

    🖖 Vue.js is a progressive, incrementally-adoptable JavaScript framework for building UI on the web.

  • Typescript photo Typescript

    TypeScript is a superset of JavaScript that compiles to clean JavaScript output.

  • TensorFlow photo TensorFlow

    An Open Source Machine Learning Framework for Everyone

  • Django photo Django

    The Web framework for perfectionists with deadlines.

  • D3 photo D3

    Bring data to life with SVG, Canvas and HTML. 📊📈🎉

Recommend Topics

  • javascript

    JavaScript (JS) is a lightweight interpreted programming language with first-class functions.

  • web

    Some thing interesting about web. New door for the world.

  • server

    A server is a program made to process requests and deliver data to clients.

  • Machine learning

    Machine learning is a way of modeling and interpreting data that allows a piece of software to respond intelligently.

  • Game

    Some thing interesting about game, make everyone happy.

Recommend Org

  • Facebook photo Facebook

    We are working to build community through open source technology. NB: members must have two-factor auth.

  • Microsoft photo Microsoft

    Open source projects and samples from Microsoft.

  • Google photo Google

    Google ❤️ Open Source for everyone.

  • D3 photo D3

    Data-Driven Documents codes.