Archive for September, 2018

ADFS – export RP and its claims

If you choose not to use the AD FS Rapid Restore Tool, then at a minimum, you should export the “Microsoft Office 365 Identity Platform” relying party trust and any associated custom claim rules you may have added. You can do this via the following PowerShell example

(Get-AdfsRelyingPartyTrust -Name “Microsoft Office 365 Identity Platform”) | Export-CliXML “C:\temp\O365-RelyingPartyTrust.xml”


Implement password hash synchronization:


Migrating from federated authentication (ADFS) to password hash synchronization:


AAD Connect configuration documenter is a tool to generate documentation of an Azure AD Connect installation. Currently, the documentation is only limited to the Azure AD Connect sync configuration.

The current capabilities of the tool include:

  • Documentation of the complete configuration of Azure AD Connect sync.
  • Documentation of any changes in the configuration of two Azure AD Connect sync servers or changes from a given configuration baseline.
  • Generation of the PowerShell deployment script to migrate the sync rule differences or customisations from one server to another.

To download the tools :

There are four main options on how you can configure SSO:


More and more C# usage and tools collection (

Some related links :



Monitoring SPO (and Onedrive!) performance and slowness:

  • The F12 tool bar network monitor or using third-party tool like fiddler or equivalent

  • SharePoint Online response header metrics (SPRequestDuration and X-SharePointHealthScore)

     SharePoint response header information

  1. Ensure that you have the F12 tools installed. For more information on downloading and installing these tools, see What’s new in F12 tools.

  2. In the F12 tools, on the Network tab, press the green play button to load a page.

  3. Click one of the .aspx files returned by the tool and then click DETAILS.Shows details of the response header
  4. Click Response headers.

    Diagram showing the URL of the response header

How to run scripts or commands in parallel with PS:

Azure AD B2B resources

  • The partner uses their own identities and credentials; Azure AD is not required.
  • You don’t need to manage external accounts or passwords.
  • You don’t need to sync accounts or manage account lifecycles.

Managing externals:

SharePoint Online Azure AD B2B – Custom email invites for users using PowerShell

Powershell to invite B2B users:

External sharing:

with SPO:

with OneDrive:

with MS Teams:

Sharing and collaboration:

B2B Collaboration in Hybrid Identity Scenario

B2B Collaboration in Hybrid Identity Scenario – Part II