This document talks about Integrating Visual Studio Team Services with Active Directory Federation Services & MFA Server

1. Integrating Visual Studio Team Services with
Active Directory Federation Services
&
MFA Server
Suman B. Singh
Suman.singh@microsoft.com

2. 1. Login to your Active Directory Server and create required OU and users
2. Go to your Azure postal and add a custom domain and verify it.
Visit https://docs.microsoft.com/en-us/azure/active-directory/fundamentals/add-custom-domain for
more information.
3. Create one Group in Azure AD

3. 4. Add Active directory users to groups.
5. Visit https://visualstudio.microsoft.com/vso/ and signup for VSTS.
6. Create Project a new project and click on small cog/gear icon then click on security.

4. 7. Click on Create Group and create a new group.
8. Click on members and add Azure AD group here.
9. Check the members.

5. 10. Login to your Multi-Factor Authentication Server and import active directory users
11. Enable MFA and appropriate mode to enable MFA (phone, text, app)

6. 12. If you want, you can Azure MFA instead of MFA server.
13. Download Azure AD connect and setup ADFS for your domain.
14. Once ADFS setup is done, launch powershell and check the status of your domain. It should be
federated status.

7. 15. Go to VSTS portal and try login with created user.
16. You will notice that page is redirecting you to your own ADFS.

8. 17. Shortly your ADFS signup page will be visible. Provide valid credentials.
You are authenticated with your ADFS and logged into VSTS portal
Questions? email to suman.singh@microsoft.com