
Explore web services standards for interoperable applications, including XML, SOAP, WS-Security, WS-Federation, and SAML, with AD FS authentication and token exchanges.
Learn how AD FS enables single sign-on in a business-to-business federation by exchanging claims through federation trusts, tokens, and cookies.
Plan high availability for AD FS federation servers and proxies, implement network load balancing, and use SQL Server clustering to ensure ongoing authentication for Office 365.
Learn to deploy AD FS in a single-organization setup, configure claims, claims rules, and both claims provider and relying party trusts, plus account and resource partners, and home realm discovery.
Manage the AD FS certificate lifecycle to prevent expiration, including automatic rollover of token signing certificates, and monitor primary and secondary federation servers.
Active Directory Federation Services (AD FS) in the Windows Server 2016 operating system allows organizations to provide their users with the flexibility to sign in and authenticate to applications that exist on a local network, at a partner company, or in an online service. With AD FS, your organization can manage its own user accounts, and users have to remember only one set of credentials. Those credentials can provide access to a variety of applications, even when they reside at different locations.
Objectives
After completing this module, you will be able to:
· Describe AD FS.
· Explain how to deploy AD FS.
· Explain how to implement AD FS for a single organization.
· Explain how to extend AD FS to external clients.
· Implement single sign-on (SSO) to support online services.