In previous articles, I’ve dove deep into the process of integrating local Active Directory with Microsoft’s cloud-based Office 365 services. This process, known as federating, provides considerable advantages including local one-stop user management and single sign-on capability. As you can imagine, these are worthy goals of many IT admins embarking on Office 365 implementations.
One of the key steps on the path to successful federation is properly adding and verifying the domain to be federated into Office 365. This process both associates the external domain name to federate with the Office 365 account and proves to Microsoft that we are the owner of the domain and thus have the legal right to do what we’re trying to do. Bad things would happen if Microsoft allowed people to federate domains they didn’t own. Possibly humorous things, but bad things nonetheless.
To associate a registered domain name with an Office 365 account, follow these steps.
To verify ownership of the domain, it’s necessary to create a TXT record in DNS using the value recorded earlier from the Office 365 Admin Center. Microsoft queries the external DNS servers for the domain to be federated checking for the existence of this TXT record. If the record is returned correctly, Microsoft infers we own the domain. If the record isn’t returned correctly things come to a standstill until it is.
Perform the following to create the DNS TXT record on either a Windows Server 2008 R2 or a Windows Server 2012 DNS server.
It’s time to tell Microsoft to get the show on the road and verify that the TXT record has been created.
Now that the domain is added to Office 365 and Microsoft has verified proper ownership, it’s possible to plow ahead and complete setting up federation. If you’re not sure how, then be sure to check out my three-part series on the subject (part one is “Active Directory Integration with Office 365: Installation“) here at Petri.
One of the beauties of this whole deal is that since local AD is actually being federated with Windows Azure AD behind the scenes, the benefits of federation can be extended beyond Office 365 to other Microsoft cloud services such as Windows InTune. I love getting more bang for my buck!