After enabling AD Federation Service (ADFS) you are being refered to your internal domain

After entering your federated domain account in a browser, are you being redirected to your internal domain name (e.g. adfs.contoso.local) instead of public domain name (e.g.

  • RDP to your ADFS server
  • Install and open the Windows Azure Active Directory Powershell, for more details see this blog post
  • Execute “Get-MsolFederationProperty –DomainName” with your external domain name e.g. “”

PS C:\Windows\system32> Get-MsolFederationProperty -DomainName

Source                          : ADFS Server
ActiveClientSignInUrl           :
FederationServiceDisplayName    : Contoso Corporation
FederationServiceIdentifier     :
FederationMetadataUrl           :
PassiveClientSignInUrl          :
PassiveClientSignOutUrl         :

  <more stuff here, not listed>


  • The output above is likely to be listing output referencing to your local (internal) domain name.
  • Open AD FS management, go to “Edit Federation Service Properties”


  • Change the references from the internal domain name to the public domain names.
    • If this is already the correct information, continue with the following steps anyway.
  • Hit OK and close AD FS management
  • In the PowerShell window, execute a Update-MsolFederatedDomain –domainname “”


Check by using “Get-MsolFederationProperty -DomainName” or your browser to see if you are being redirected to the correct URL this time.

Consider leaving a reply in case this post helped you. Thanks!

Comments (4)

  1. ris says:

    Can I use different DNS namespaces for Internal VS External Access? Something like Internally ADFS endpoint is "" and externally called "" ? I was hoping I can with SAN certs and additional DNS zones to host the respective
    A records.

  2. Pieter says:

    Hi Ris, yes that should work as long as the DNS is arranged accordingly.

  3. DaveC4 says:

    If my UPN suffix is my internal domain (user@contoso.local), would this allow SSO to work externally for ( Or would we have to change UPN suffixes?

  4. Dilek says:

    Brilliant! You saved my day!

Skip to main content