[Access Control] How to Federate Only a subdomain with Access Control

Question

Is there a way to federate only subdomains with a parent-child relationship among the domains managed in Microsoft 365 with Access Control?

Answer

By removing the parent-child relationship between domains, you can federate only the subdomain with Access Control.
* If you want to restore the removed parent-child relationship, you need to delete the child domain in Microsoft 365 and re-register it while the parent domain is in a verified state.

Procedure

1. From the Access Control Administration, go to [System] - [Connected Services].

   

2. From the list of services, select the row where the "Display Name" is [Microsoft] and the "Type" is [Microsoft].

   

3. Click [Federated Domains] - [Manage Domains].

   

4. If the [Requested Permissions] screen for Microsoft 365 appears, check [Consent on behalf of your organization] and select [Accept].
   * If you are already authenticated, you can proceed to the next screen by selecting a user.

5. On the "Domain Management" screen, click [Separate] for the child domain you want to federate.
   * In this example, the domain to be federated is "sub2.example.com".

   

6. On the confirmation screen, confirm the details and check the checkbox.
   Then click [Separate].

   

7. Confirm that the status of the separated domain is "Not Federated," then click [Federate].

   

8. On the confirmation screen, confirm the details and click [Federate Domain].

   

9. If the status of the target domain has changed to "Federated," the process is complete.