1. ADD a new domain to AAD domain in Azure Portal or O365 Portal.
2. Add 3rd O365 RP claim rule in ADFS management
- For Multiple Forest
c:[Type == "http://schemas.xmlsoap.org/claims/UPN"] => issue(Type = "http://schemas.microsoft.com/ws/2008/06/identity/claims/issuerid", Value = regexreplace(c.Value, ".+@(?<domain>.+)", "http://${domain}/adfs/services/trust/"));
- For Multiple UPN/Sub-domain
c:[Type == "http://schemas.xmlsoap.org/claims/UPN"] => issue(Type = "http://schemas.microsoft.com/ws/2008/06/identity/claims/issuerid", Value = regexreplace(c.Value, "^.*@([^.]+.)*?(?<domain>([^.]+.?){2})$", "http://${domain}/adfs/services/trust/"));
3. Update-MsolFederatedDomain -DomainName org_domain_name -SupportMultipleDomain
4. Convert-MsolDomainToFederated -DomainName seanth.tk -SupportMultipleDomain