I have set up our default SP web app and my sites in our QA environment to use ADFS. I have also created a custom claims provider to resolve the ADFS names in the people picker. I have two outstanding issues, however.
The first issue is the ADFS names are not resolving in central admin, which is using NTLM. I need this web app to resolve both NTLM and ADFS names
The second is there are two names showing in the people picker in our SP web app; one from NTLM and the other from ADFS. I would like to remove the NTLM version without having to turn NTLM off on the web app.
EDIT: I found how to hide the AD users in the people picker:
Hide Default Authentication provider
You just run the following PowerShell cmd:
# hide the AD users in the people picker
$cpm = Get-SPClaimProviderManager
$ad = get-spclaimprovider -identity "AD"
$ad.IsVisible = $false
$cpm.Update()
Edit 2
Unfortunately, the above command hides the AD provider across the farm. That means central admin too. Likewise, we have two other web apps that are still going to use NTLM, so I can't hide the AD provider unless there is a way to do it per web app, which I haven't found..