Installing Defender AD FS Adapter
This section describes the procedure that is required to run the installer and complete the installation of Defender AD FS Adapter.
To run the Installer
- Launch Defender AD FS Adapter installer EXE from an elevated command prompt (right-click Command Prompt and select Run as Administrator).
-
Accept the license agreement and continue with the installation.
-
Complete the remaining steps for installing Defender AD FS Adapter.
NOTE: AD FS service will restart during installation. - By default the Start Defender AD FS Configuration Tool check box is selected. Clear the check box if you do not want to configure Defender AD FS. Click Finish to complete the setup and start Defender AD FS Adapter configuration tool.
|
|
NOTE: After the configuration of Defender AD FS Adapter, in the AD FS Management console, select One Identity Defender AD FS Adapter as the Multi-factor Authentication method. |
Upgrading Defender AD FS Adapter
This section describes the procedures that must be followed before upgrading One Identity Defender AD FS Adapter on the operating systems listed below.
Upgrading 2012
Windows Server 2012 R2
Before Upgrading One Identity Defender AD FS Adapter, perform the following:
-
Launch the AD FS Management console on the primary server in the AD FS farm.
-
Navigate to AD FS | Authentication Policies, and click Edit Global Multi-factor Authentication. Alternatively, navigate to Multi-factor Authentication | Global Settings, and click Edit.
-
In the Edit Global Authentication Policy dialog box, click Multi-factor.
-
Clear the One Identity Defender AD FS Adapter authentication method.
Upgrading 2016 or 2016
Windows Server 2016 or Windows Server 2019
Before Upgrading One Identity Defender AD FS Adapter, perform the following:
- Launch the AD FS Management console on the primary server in the AD FS farm.
-
Navigate to AD FS | Service | Authentication Methods.
-
Click Edit under Multi-factor Authentication Methods. Alternatively, click Edit Multi-factor Authentication Methods.
- Clear the One Identity Defender AD FS Adapter authentication method.
Run the below PowerShell commands
- Launch Windows PowerShell as Administrator.
- Run the
Unregister-AdfsAuthenticationProvider -Name "Defender AD FS Adapter" -Confirm:$false command.
- Once the above command is successful, run the Restart-Service adfssrv command.
To install the One Identity Defender AD FS Adapter, use the DefenderADFSAdapter.exe file, and follow the on-screen instructions. For information on the procedure to be followed after installing Defender AD FS Adapter, see Configuring AD FS Multi-factor Authentication (MFA).