Cross Domain Authentication with ADFS (no domain trust)

This is not possible without a domain trust.


ADFS allows applications to authenticate against AD (or another Identity Provider) without direct access to it; but the applications must explicitly support this authentication method.
Windows logon doesn't.
In order to log on to a Windows system, you need to either:

  • Log in using a local user account
  • Log in using a user account in the domain the system is joined to
  • Log in using a user account in a trusted domain