This guide follows AD FS on Windows Server 2016. AD FS on Windows Server 2019, 2022 and 2025 looks the same. OpenID Connect needs AD FS on Windows Server 2016 or later: AD FS on Windows Server 2012 R2 has no application groups. On 2012 R2, use the guide for SAML instead.
- On your AD FS server, open Server Manager and select Tools > AD FS Management. You need an account that is a local administrator on the AD FS server.
- Select Application Groups, then Add Application Group in the Actions pane.
Screenshot: Microsoft, CC BY 4.0, changed by Mediaflow.