[Question] ADFS integration with k8 RBAC about aks-engine

[welcome]

👋 Thanks for opening your first issue here! If you're reporting a 🐞 bug, please make sure you include steps to reproduce it.

[soocode]

Tagging @jackfrancis for awareness. It would be greatly appreciate if we can have answers.

[bridgetkromhout]

Hi, @soocode - Jack is away for a bit. Perhaps @jadarsie can answer; this repo is also not a good source of Azure Stack Hub support and will be archived later this year (see https://learn.microsoft.com/en-us/azure-stack/user/azure-stack-kubernetes-aks-engine-overview?view=azs-2206 instead). Thanks.

[soocode]

Hi, @bridgetkromhout thank you for letting me know. It seems the documentation has no answers for my question. I'll wait for @jadarsie's feedback.

[jadarsie]

@soocode, the doc page says ADFS is not supported (https://github.com/Azure/aks-engine/blob/master/docs/topics/aad.md#prerequisites)

Please log an issue here (https://github.com/Azure/aks-engine-azurestack/issues/new), I will try to understand what was the limitation on ADFS and based on that maybe find a solution.

[cacarroll]

@jadarsie The scenario is an air gapped Azure Stack Hub with ADFS/DC integration for identity. Can we set up AKS Engine to use the ADFS/DC to provide RBAC? I understand the document above references a scenario for AAD but is there a solution for those who are offline and need to use a local identity source?