We have ADFS 3.0 setup on several VMs in Azure with a Site-to-Site VPN between them and the local Network.
All works fine until the VPN goes down and although external users can access the ADFS logon screen (via the ADFS Proxy in Azure) they are unable to authenticate, even though there are two Domain Controllers in Azure.
We can't understand why the DC's in Azure won't authenticate the users while the VPN is down?
As soon as the VPN comes back up again it all starts working.
We've checked that the Azure VMs are using the correct DNS settings i.e. they are looking at the local DC rather than on-premise and that seems ok
Anyone else had similar problems?
Cheers for now
Russell