ADFS Can you have 2 farms in one Domain?

I was hoping to hear from others that are moving over to ADFS. We are afraid we may encounter major problems if the Lawson ADFS is not a part of our exiting ADFS system. We have not found a way to have two farms in one Domain. Also is it even possible? Any suggestions or recommendations would be greatly appreciated.

Thanks

Find more posts tagged with

Infor Lawson Technology Group - Discussion

Comments

unknown

Not recommended to use your existing ADFS system for use with Infor. It needs to have it's own ADFS server and configure it's own farm.

unknown

When you initially set up an ADFS farm an Active directory pointer is created. That pointer can only point to one IP as far as I know. We haven't been able to get an official word from Microsoft but most people say you can't have two farms in one domain. Yes, we have multiple instances/trust relationships and we can set up many more instances, but we are not sure about a separate farm. I know you can set up separate farms if there are multiple locations/domains in a forest. We are afraid to mess up our other farm.

Thank you please let me know your thoughts.

unknown

You can have as many farms as you want in the same domain. Not sure where you seen that limitation??

Here is a good discussion and direct confirmation of that from MS

social.technet.microsoft.com/.../multiple-adfs-servers-within-a-single-domain

unknown

You're mixing up several different issues here

1. As I said before, you can have as many farms as you want

2. If you have multiple domains/forests that needs to be used by Lawson, this needs to be set in IFS properly, and MIGHT need to be defined in the "primary" ADFS in some cases

Generally, if you have bi-directional trust between forests or all domains are within the same forest, you only need to have ONE ADFS instance configured with IFS. Everything else just need to be defined via LDAP links inside IFS configuration properly.

The ONLY reason to have multiple ADFS servers or have anything "weird" defined in a primary ADFS configuration - either if you do not have bi-directional trust between forests, or if you have a non-standard SAML data source (e.g. Azure, ping-federate etc).

Copyright © 2025 Infor. All rights reserved.