Office 365 Domain convert to standard authentication


 

During our Office 365 trial I dabbled with the idea of federating our local domain with Office 365 so that users could use their Active Directory username and password to access services in the cloud as opposed to another set of credentials.

This sounded really cool to begin with but in the end we decided NOT to federate our domain with Office 365.  In order to convert your domain from Federated back to Managed you must execute the following PowerShell commands:

Import-Module msonline
$cred = Get-Credential
Connect-MsolService -cred $cred
Get-Command –Module msonline
Set-MSOLContextCredential -MSOLAdminCredentials $cred
convert-MsolDomainToStandard –DomainName like10.com –passwordfile password.txt –SkipUserConversion true

Successfully updated ‘like10.com’ domain.

If convert-MsolDomainToStandard cannot connect to ADFS 2.0 you will receive the following error:

Convert-MsolDomainToStandard : Failed to connect to Active Directory Federation Services 2.0 on the local machine.  Please try running Set-MsolADFSContext before running this command again.

I simply executed the commands from the server hosting the ADFS 2.0 role.

Wes MacDonald's avatar

About Wes MacDonald

Wes MacDonald is a DevOps Consultant for LIKE 10 INC., a DevOps consulting firm providing premium support, guidance and services for Azure, Microsoft 365 and Azure DevOps.

One Response to “Office 365 Domain convert to standard authentication”

  1. Unknown's avatar

    Do you know of any way to do this after you have migrated email boxes without breaking everything? We are about to go live tomorrow so I am in a bind. I have been working with an MS partner who setup the ADFS and migrated mailboxes, but they haven’t been all that informative when it comes to all the caveats I now see. I am guessing I am SOL.

    Like

Leave a comment

This site uses Akismet to reduce spam. Learn how your comment data is processed.