Workplace Join/Device Registration to Azure AD for Local Domain joined Windows 7


<A reference originated>

https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration-windows7/

https://azure.microsoft.com/en-us/documentation/articles/active-directory-conditional-access-automatic-device-registration/

 

<Pre-requisite>
Accounts between On-premise and Azure AD must be synchronized via AAD connect

 

<System Configuration check>

From DNS server,

dns

From ADFS server,
1. O365 federation

2. Enable device registration
Initialize-ADDeviceRegistration
Enable-AdfsDeviceRegistration
Set-AdfsDeviceRegistration -ServiceAccountIdentifier mfalab3\taehee
Get-AdfsDeviceRegistration

setspn -Q host/fs.mfalab3.com

ADFS1

 

3. Add claimrules

adfs claim rule
c:[Type == "http://schemas.microsoft.com/claims/authnmethodsreferences"]
=> issue(claim = c);

Open Powershell and run
Set-AdfsRelyingPartyTrust -TargetName "Microsoft Office 365 Identity Platform" -AllowedAuthenticationClassReferences wiaormultiauthn

 

From Domain joined Win7,
1. Try login to "https://portal.office.com", enter current login domain user account - "must login in without redirecting ADFS login page!!"

2. Download and Install "Workplace Join agent"
x64
x86

And run "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /join"

To leave, "C:\Program Files\Microsoft Workplace Join>AutoWorkplace.exe /leave"

 

<Result>

From Win7,

joined1

 

From Azure Portal

joined2


Comments (0)

Skip to main content