Plaza 9, KD Tower Cotterells, Hemel Hempstead, HP1 1FWinfo@cloudable.biz

Is ADFS now dead?

For those of you keeping an eager eye on cybersecurity, NCSE published some new guidance for securing Office 365 earlier this year. This new guidance includes one significant change from Microsoft, which some may find a little controversial.

Microsoft now recommends that hybrid environments – i.e. those that use Active Directory Domain Services and Azure AD – should prefer native authentication against Azure AD rather than ADFS.

In Microsoft-speak this is ‘Seamless SSO with Password Hash Sync’, configured to use either per-user or Conditional Access MFA.

Password synchronisation with the cloud can feel like a scary thing to do, but in actuality, organisations using Azure AD as their primary authentication source will lower their risk compared with ADFS.

This is because:

  • It’s the hashes of your password hashes that are sent to Azure AD, and not the reusable NTLM hashes commonly discussed in “pass the hash” attacks. This means that the credentials sent to Azure AD can’t be used to authenticate to any of your on-premise infrastructures that rely on Active Directory.
  • We are already relying on Azure AD to make access control decisions regulating who can see which data, hosted in Office 365. So we already need to trust that it’s built and operated securely. Storing password hashes doesn’t change that security requirement.
  • The availability of Office 365 will no longer be affected by any outages or downtime suffered by your on-premise ADFS or Active Directory infrastructure.

For those interested, the new Microsoft guidance can be found here:  It’s a brave new world out there!

27 Responses to “Is ADFS now dead?

  • THANK YOUU!!!

  • I need to to thank you for this fantastic read!! I absolutely enjoyed every bit of
    it. I have got you book-marked to look at new
    things you post…

  • Thanks for the marvelous posting! I certainly enjoyed reading it, you may be a great author.I
    will be sure to bookmark your blog and may come back from now on.
    I want to encourage you to definitely continue your great writing, have a nice evening!

  • Hi! I just want to offer you a big thumbs up for your great info you’ve got
    right here on this post. I am coming back to your blog
    for more soon.

    Also visit my page – software akuntansi

  • Hmm is anyone else experiencing problems with the pictures on this blog loading?
    I’m trying to determine if its a problem on my end or if it’s the blog.
    Any feedback would be greatly appreciated.

  • We’re a group of volunteers and starting a new scheme
    in our community. Your site provided us with valuable information to work on. You’ve done an impressive job and our entire
    community will be grateful to you.

  • Thank you for another wonderful article. The place else could anyone get that type of information in such an ideal
    means of writing? I have a presentation next week, and I’m on the
    look for such information.

  • I’m extremely impressed with your writing skills and also
    with thee layout on your blog. Is this a paid theme or did youu cusomize it yourself?
    Either way keep up the nice quality writing, it’s rare
    to see a nice blog like this one nowadays.

  • Great information. Lucky me I came across your site by accident (stumbleupon).

    I have saved as a favorite for later!

  • Very nice write-up. I definitely appreciate this site.
    Keep writing!

  • I needed to thank you for this good read!! I definitely loved every bit of
    it. I’ve got you bookmarked to check out new stuff you post…

  • Terrific post however , I was wondering if you
    could write a litte more on this topic? I’d be very grateful
    if you could elaborate a little bit more. Many thanks!

  • It’s a shame you don’t have a donate button! I’d certainly donate to this
    excellent blog! I suppose for now i’ll settle for bookmarking and
    adding your RSS feed to my Google account.

    I look forward to fresh updates and will talk about this blog with my
    Facebook group. Talk soon!

  • Its like you read my mind! You seem to know a lot about this,
    like you wrote the book in it or something. I think
    that you can do with a few pics to drive the message home a little bit, but other than that, this is great
    blog. An excellent read. I’ll definitely be back.

  • Hey there! Do you use Twitter? I’d like to follow
    you if that would be okay. I’m undoubtedly enjoying your blog and
    look forward to new posts.

  • Wow that was unusual. I just wrote an very long comment but after
    I clicked submit my comment didn’t appear. Grrrr…

    well I’m not writing all that over again. Anyways, just wanted to say fantastic blog!

  • magnificent post, very informative. I wonder why the opposite
    experts of this sector don’t understand this. You
    should continue your writing. I’m sure, you’ve a huge readers’ base already!

  • It’s actually a nice and helpful piece of info.
    I am satisfied that you shared this useful information with us.
    Please stay us informed like this. Thank you for sharing.

  • Howdy! Someone in my Facebook group shared this website with us so I came to
    take a look. I’m definitely enjoying the information. I’m bookmarking
    and will be tweeting this to my followers! Excellent blog and wonderful design and style.

  • Hi just wanted to give you a brief heads up and let you
    know a few of the images aren’t loading properly. I’m not
    sure why but I think its a linking issue. I’ve tried
    it in two different internet browsers and both show
    the same outcome.

  • Very great post. I simply stumbled upon your blog and wanted to mention that I’ve really loved surfing around
    your weblog posts. After all I will be subscribing on your feed and I
    am hoping you write once more soon!

  • Hi, i think that i saw you visited my web site so i came to “return the
    favor”.I am attempting to find things to improve my site!I suppose
    its ok to use a few of your ideas!!

  • I coulɗn’t resist commenting. Excеptionally well written!

    Review my webpɑgе – Bandarq

  • What’s Going down i’m new to this, I stumbled upon this I’ve found It positively useful and it
    has aided me out loads. I hope to contribute & help different users like its helped me.
    Good job.

  • Touche. Solid arguments. Keep up the great work.

  • I couldn’t resist commenting. Very well written!

  • Good site you have here.. It’s hard to find high quality writing like yours these days.

    I seriously appreciate individuals like you! Take care!!

Leave a Reply

Your email address will not be published. Required fields are marked *