Using multiple identity providers and authentication scenarios
Users can log into the accounts and access applications that are integrated with Azure AD.
Using multiple identity providers
There are two options for signing users into Azure AD:
Authenticating to Azure AD.
Authenticating to an On-premises Identity Provider.
In the following figure, you can see a simple example of a combination of these two modes. If you are a user of msazure.ch,
you use AAD as your identity provider and a user from idam.ch
the local Active Directory with a configured ADFS infrastructure.
AD FS architecture including the Web Application proxy (AD FS proxy)
The Web Application proxy, or the AD FS proxy in older versions, is used for the following reasons:
Used to enhance the security and performance of the AD FS installation
The proxy service is exposed over HTTPS and client connections terminate at the proxy
When installing AD FS proxy, a trust is created between the proxy and the AD FS farm
It is included in the web...