(2014-03-11) Converting An ADFS StandAlone Installation To An ADFS Farm Installation

In ADFS v2.0 (on W2K8 or W2K8R2) and ADFS v2.1 (on W2K12) you configure ADFS in StandAlone mode. As you may know when ADFS is installed in StandAlone mode you cannot add additional ADF STS instances. The StandAlone mode SHOULD/MUST NOT be used for production purposes! However, if you made a mistake and you would like to have ADFS in Farm instead to be able to install additional ADFS STS instances, you need to convert it first from StandAlone mode to Farm mode. That’s basically done by changing the ADFS service account from "Network Service" to a custom AD user account. To be able to do that you need to use the PowerShell script available in this post.

Your starting point with this is therefore that you have 1 ADFS STS server in StandAlone mode that will be converted to Farm mode.

After starting the script, you need to confirm with a capital C and press ENTER

Figure 1: Starting The PowerShell Script And Confirm Its Execution

–

As an operation mode, select option 2 (Final Federation Server), which means a writable federation server.

Figure 2: Selecting The Operation Mode

–

At some point provide the new service account in the form <domain>\<account> and also specify its password

Figure 3: Providing A New Service Account And Executing The Script To Change All Components Accordingly

–

The script continues….

If everything goes OK you will see something similar as below

Figure 4: Executing The Script To Change All Components Accordingly Including Any Post Samples – In This Case NONE

–

However if something goes WRONG you will see something similar as below

Figure 5: Executing The Script To Change All Components Accordingly Including Any Post Samples – In This Case 2 Post Samples

–

To migrate the database from WID to SQL see: AD FS 2.0: Migrate Your AD FS Configuration Database to SQL Server

–

Cheers,
Jorge
———————————————————————————————
* This posting is provided "AS IS" with no warranties and confers no rights!
* Always evaluate/test yourself before using/implementing this!
* DISCLAIMER: https://jorgequestforknowledge.wordpress.com/disclaimer/
———————————————————————————————
############### Jorge’s Quest For Knowledge #############
######### http://JorgeQuestForKnowledge.wordpress.com/ ########
———————————————————————————————