Configuring Azure AD Connect Health for AD FS
Azure AD Connect Health can be expanded to include monitoring of AD FS servers and Web Application Proxy (WAP) servers of your organization's AD FS implementation. This recipe shows how to do this.
Getting ready
To complete this recipe, sign in to Azure AD with an account that has the Global administrator role assigned to it. If the organization uses the Azure AD PIM feature, activate the Global administrator role in advance. Access to the Azure AD Connect Health dashboard can be delegated through its RBAC IAM settings.
The Azure AD Connect Health functionality requires Azure AD Premium P1 licenses or Microsoft licenses that include the P1 license, such as Azure AD Premium P2, EMS E3, EMS A3, Microsoft 365 E3, or Microsoft 365 Business licenses.
Ensure all AD FS servers and WAP servers run Windows PowerShell 4.0 or above and have Internet Explorer Enhanced Security Configuration (IE ESC) turned off.
