Add a Host (A) Resource Record to Corporate DNS for a Federation Server
Applies To: Active Directory Federation Services (AD FS) 2.0
For clients on the corporate network to successfully access a federation server using Windows Integrated authentication, a host (A) resource record must first be created in the corporate Domain Name System (DNS) that resolves the host name of the account federation server (for example, fs.fabrikam.com) to the IP address of the federation server or federation server cluster. You can use the following procedure to add a host (A) resource record to corporate DNS for a federation server.
Membership in Administrators, or equivalent, is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).
To add a host (A) resource record to corporate DNS for a federation server
On a DNS server for the corporate network, open the DNS snap-in.
In the console tree, right-click the applicable forward lookup zone, and then click New Host (A or AAAA).
In Name, type only the computer name of the federation server or federation server cluster; for example, for the fully qualified domain name (FQDN) fs.fabrikam.com, type fs.
In IP address, type the IP address for the federation server or federation server cluster, for example, 192.168.1.4.
Click Add Host.