Azure-docs: ADFS Enable-AdfsDeviceRegistration

[Martony78]

This documentation never mention enabling ADFS Device Registration, is it a prerequisite or not?
https://blogs.technet.microsoft.com/taehee/2019/01/24/workplace-join-device-registration-to-azure-ad-for-local-domain-joined-windows-7-and-2012/#comment-535

---

Document Details

⚠ Do not edit this section. It is required for docs.microsoft.com ➟ GitHub issue linking.

• ID: b9c51404-0a1b-c22e-e220-ce4126ff88d0
• Version Independent ID: bd3aab43-4202-bb69-bd1a-580e0464f357
• Content: Configure hybrid Azure Active Directory join for federated domains
• Content Source: articles/active-directory/devices/hybrid-azuread-join-federated-domains.md
• Service: active-directory
• GitHub Login: @MarkusVi
• Microsoft Alias: markvi

[CHEEKATLAPRADEEP-MSFT]

@Martony78 Thanks for the question! We are investigating and will update you shortly.

[Martony78]

Any update?

[neeleshray]

@MarkusVi
Markus, Do we have this documented elsewhere or can this be incorporated in this document ?

[Martony78]

It has been a month and still no answer, does anyone at MSFT knows if ADFS Device Registration is a prerequisite or not?

[Weishaupt]

@CHEEKATLAPRADEEP-MSFT any update?

[RSteeno]

We are an Okta shop and do not use AD FS. Unlike AD FS, Okta does not have the ability to issue device claims and therefore the "instantaneous Hybrid Azure AD Join" as mentioned below does not work. It would be helpful to point out that if you are NOT using AD FS you would be required to use this alternate approach of using AAD Connect to Sync the computer objects to AAD.

"Beginning with Windows 10 1803, if the instantaneous Hybrid Azure AD join for federated domain like AD FS fails, we rely on Azure AD Connect to sync the computer object in Azure AD that is subsequently used to complete the device registration for Hybrid Azure AD join."

[Martony78]

It has been almost 4 months and still no answer, let me reformulate my question in case it is unclear:
Does this page enumerate all actions required to perform Hybrid AAD to current and down level devices or is there other actions to perform?

[MicrosoftGuyJFlo]

@Martony78 the doc should have everything you need.

[MicrosoftGuyJFlo]

@Martony78 sorry this issue got lost in the shuffle when I took over the docs and was getting up to speed on the content.

[Martony78]

OK thank you for your reply.
You should tell your MS fellow Taehee Lee to remove the blog post posted last january, it is kind of confusing and made me and my client secops team lose time.
https://blogs.technet.microsoft.com/taehee/2019/01/24/workplace-join-device-registration-to-azure-ad-for-local-domain-joined-windows-7-and-2012/

[MicrosoftGuyJFlo]

@Martony78 I sent them a note to ask they pull their blog post.

[MicrosoftGuyJFlo]

please-close