Create a simple Azure Active Directory single sign-on lab environment

This template will deploy a set of Windows Server 2016 VMs that can be used as an Azure AD single sign-on lab.

Networking

The virtual network has two subnets: an external-facing subnet an an internal subnet. A network security group on the internal subnet prevents all inbound traffic and only allows 53, 443, and 3389 from the external subnet.

VMs

This template deploys the following VMs (in the specified subnet):

1. Remote desktop jump server (external)
2. Domain controller (internal)
3. ADFS farm server (internal)
4. ADFS proxy server (external)
5. Synchronization server (internal)

With the exception of the domain controller the template only deploys the operating system to the VMs.

Active Directory Domain Services

This template also deploys and configures an AD DS single-domain forest and populates the domain with OUs, users, and groups. All of the VMs on the internal subnet are joined to this domain.

Template based on mbakunas/azure-ad-sso-lab