There's a lot more to it than this, but it would be worthwhile researching further as it's a rather common scenario. Authorization is still done in SharePoint. Then connect (based on configurable logic and security) to other ADFS servers in other domains to authenticate users. Finally, follow the on-screen prompts, and then approve the. Under Additional Security Options, you’ll see Passwordless Account. Next, visit your Microsoft account, sign in, and choose Advanced Security Options. You then configure SharePoint to trust its own ADFS server as an identity provider. First, ensure you have the Microsoft Authenticator app installed and linked to your personal Microsoft account. You could configure oneĪDFS server in each domain and configure trusts between them - this is not the same as an Active Directory trust relationship, it only uses HTTPS for example. If security policies allow, I would suggest to have a look at SharePoint claims based authentication and a single sign-on solution by implementing Active Directory Federation Services (ADFS).

Microsoft authenticator for windows