Dears, I have small question. why does federation services require domain admin?!
The CRM administrator in our company needs a domain admin privilege to install ADFS in win
2012 R2 to configure IFD for the CRM 2016. So I need to know why the federation services needs a domain admin,and is there any modification will happen in my domain.
Its probably best that the CRM administrator sticks to just CRM config inside the web app, ADFS can be a tricky process is too many people are fiddling with it. Keep ADFS within the confines of the ICT department or equivalent.