Note: This question is part of a series of questions that present the same scenario. Each question in the series
contains a unique solution. Determine whether the solution meets the stated goals.
You have an on-premises Active Directory forest.
You deploy Active Directory Federation Services (AD FS) and purchase an Office 365 subscription.
You need to create a trust between the AD FS servers and the Office 365 subscription.
Solution: You run the New-MsolFederatedDomain cmdlet.
Does this meet the goal?
A.
Yes
B.
No
Explanation:
Each domain that you want to federate must either be added as a single sign-on domain or converted to be a
single sign-on domain from a standard domain. Adding or converting a domain sets up a trust between AD FS
and Microsoft Azure Active Directory (Microsoft Azure AD).
Note: The New-MSOLFederatedDomain cmdlet adds a new single sign-on domain (also known as identityfederated domain) to and configures the relying party trust settings between the on-premises AD FS server.
Due to domain verification requirements, you may need to run this cmdlet several times in order to complete
the process of adding the new single sign-on domain.References:
https://msdn.microsoft.com/en-us/library/azure/dn194105(v=azure.98).aspx
https://msdn.microsoft.com/en-us/library/azure/jj205461.aspx