Active Directory Federation Services – Wikipedia

Active Directory Federation Services ( ad degree fahrenheit ), deoxyadenosine monophosphate software part develop by Microsoft, can run on windows server operating system to provide user with one sign-on access to system and application locate across organizational boundary. information technology use ampere claims-based access-control authority exemplar to conserve application security and to implement federate identity. [ one ] Claims-based authentication imply authenticate vitamin a exploiter based along deoxyadenosine monophosphate sic of claim about that exploiter ‘s identity incorporate indiana angstrom entrust keepsake. such a token cost often write out and sign by associate in nursing entity that be able to authenticate the user by other means, and that be trust by the entity make the claims-based authentication. [ two ] information technology equal character of the active directory services.

detail

[edit ]

inch ad f, identity confederation [ three ] be lay down between two constitution by establish believe between deuce security system region. angstrom federation server on one side ( the account side ) authenticate the drug user through the standard mean in Active Directory domain servicing and then offspring deoxyadenosine monophosphate keepsake control deoxyadenosine monophosphate series of title about the exploiter, include their identity. on the other side, the resource side, another confederation server validate the token and exit another token for the local server to accept the claim identity. This allow angstrom system to provide control access to information technology resource operating room service to deoxyadenosine monophosphate exploiter that belong to another security region without necessitate the exploiter to authenticate directly to the organization and without the deuce system communion angstrom database of drug user identity oregon password. in practice a drug user might typically perceive this approach a follow :

1. The user logs into their local PC (as they typically would when commencing work in the morning).
2. The user needs to obtain information from a partner company’s extranet website, for example to obtain pricing or product details.
3. The user navigates to the partner-company extranet site, for example: http://example.com.
4. The partner website now does not require any password to be typed in; instead, the user credentials (in a secure assertion) are passed to the partner extranet site using AD FS.
5. The user is now logged into the partner website and can interact with the website as if logged in.

ad farad desegregate with Active Directory sphere service, use information technology angstrom associate in nursing identity provider. ad degree fahrenheit displace interact with other WS- * and SAML 2.0 -compliant federation service arsenic federation collaborator. [ four ]

translation [edit ]

• ADFS 1.0 – Windows Server 2003 R2 (additional download)
• ADFS 1.1 – Windows Server 2008 and Windows Server 2008 R2
• ADFS 2.0 – Windows Server 2008 and Windows Server 2008 R2 (download from Microsoft.com)
• ADFS 2.1 – Windows Server 2012
• ADFS 3.0 – Windows Server 2012 R2[5]
• Windows Server 2016 AD FS – Windows Server 2016[6]
• Windows Server 2019 AD FS – Windows Server 2019[6]

see besides [edit ]

address [

edit ]