For ADFS, if you have multiple UPN namespaces with the same root namespace, do all of the DNS namespaces that match the UPN namespaces need to be publicly available in DNS? Or just the root namespace? Do you need to own the root namespace? Can 2 different organizations utilize separate ADFS and utilize the same root namespace? We want our users to be able to log into their cloud services with UPNs that match their email addresses, so they can remember their logon ID. We have 5 e-mail domains (and a lot of users) Although they share the same root, we do not own this root namespace, but an affiliate does. There is another namespace that we own the root of that we could potentially use, but only the root domain is publicly available, the child domains are behind firewalls. This is a bit less desireable, because users would need to remember some additional information. We only want to have to set up 1 highly available ADFS/ADFS Proxy Farm. Example: root.com (The domain we do not own, but have an affiliate who does) agency1.root.com (email domain 1) agency2.root.com (email domain 2) agency3.root.com (email domain 3) agency4.root.com (email domain 4) agency5.root.com (email domain 5) ourforest.root.com (publicly exposed DNS namespace) agency1.ourforest.root.com (firewalled DNS namespace) agency2.ourforest.root.com (firewalled DNS namespace) agency3.ourforest.root.com (firewalled DNS namespace) agency4.ourforest.root.com (firewalled DNS namespace) agency5.ourforest.root.com (firewalled DNS namespace) 4. What is our best option for utilizing ADFS?

Hello, as AD FS is the main part in your question please use the following forum: http://social.msdn.microsoft.com/Forums/en-US/geneva/threads/Best regards Meinolf Weber Disclaimer: This posting is provided "AS IS" with no warranties or guarantees , and confers no rights.