Renew ADFS Certificates For "Microsoft Office 365 Identity Platform" RP

Query King | Tue, 09 Feb 2021 at 03:16 hours | Replies : 2 | Points : 100

Category : Microsoft Azure


Hi All,

 

Our ADFS certificate is expiring soon. We have Azure configured with ADFS as authentication method and i can see  “Microsoft Office 365 Identity Platform” replaying party in ADFS console. Please help to renew/update certificate into Azure O365.


This Question is already solved Click To See The Answer


 

Hi,

If Active Directory Federation Services (ADFS) is selected as Authentication method for Azure AD then it is required to sync the new ADFS certificate with Azure AD.

  • Check if new certificate is updated in ADFS. Run Get-AdfsSslCertificate and make sure correct certificate is listed.
  • Make sure federation Server (ADFS) is accessible from System from where you want to run the command.

 

# For Example:

Federation (ADFS) Server name = ADFS_SVR_01.EXPERTS-ADDA.LOCAL

Public Domain Name = EXPERTS-ADDA.COM

 

Run below command with Global Administrator permission.

Import-Module MSOnline
Connect-MsolService
Set-MsolADFSContext -Computer ADFS_SVR_01.EXPERTS-ADDA.LOCAL
Get-MsolFederationProperty -DomainName EXPERTS-ADDA.COM | FL Source, TokenSigningCertificate
Update-MSOLFederatedDomain -DomainName EXPERTS-ADDA.COM

 

Once above command Run successful, Run below command to confirm if certificate is updated. 

Get-MsolFederationProperty -DomainName EXPERTS-ADDA.COM | FL Source, TokenSigningCertificate

 

Thanks, it worked.