DC

Add-KdsRootKey -EffectiveTime (Get-Date).AddHours(-10)
New-ADServiceAccount -Name adfssvc -DNSHostName adfs.corp.com

SRV1

Install-WindowsFeature adfs-federation -IncludeManagementTools
gpupdate /force
$Cert = Import-PfxCertificate \\192.168.0.1\C$\Users\Administrator\wildcard.pfx -CertStoreLocation Cert:\LocalMachine\My\ -Password (ConvertTo-SecureString "Skill39**" -AsPlainText -Force)
ls Cert:\LocalMachine\My\
install-adfsfarm -CertificateThumbprint $Cert.Thumbprint -FederationServiceName adfs.corp.com -FederationServiceDisplayName "CORP Federation" -GroupServiceAccountIdentifier CORP\adfssvc$ -OverwriteConfiguration
Add-AdfsRelyingPartyTrust -Name CORP -Metadataurl <https://adfs.corp.com/federationmetadata/2007-06/federationmetadata.xml>

image.png

SRV2

Install-WindowsFeature adfs-federation -IncludeManagementTools
gpupdate /force
$Cert = Import-PfxCertificate \\192.168.0.1\C$\Users\Administrator\wildcard.pfx -CertStoreLocation Cert:\LocalMachine\My\ -Password (ConvertTo-SecureString "Skill39**" -AsPlainText -Force)
ls Cert:\LocalMachine\My\
Add-AdfsFarmNode -CertificateThumbprint $Cert.Thumpbprint -GroupServiceAccountIdentifier CORP\adfssvc$ -PrimaryComputerName SRV1.corp.local -OverwriteConfiguration
Set-AdfsSyncProperties -PollDuration 10
Restart-Service adfssrv -PassThru

image.png