SharePoint 2013 authentication senario

Question

We have webapplication extended to provided windows auth on one zone and SAML Auth using ADFS on second zone. We have SharePoint servers let's say on Contoso.com and users are Foo.com domain. This Foo.com domain has ADFS server configured for SAML authentication. My question is can i use same Foo.Com users for windows authentication meaning same domain users login using different authentication providers ? If yes , what should be direction of one way trust between domains ?

Please advise

Thanks, Ronak

Answer 1

No, you should never mix two forms of authentication for the same user as SharePoint will see them as two distinct objects; this can cause issue with apps that rely on the UPSA, such as Workflow Manager.