Active Directory Federation Services

Active Directory Federation Services (AD FS) 2.1, included in Windows Server 2012, provides for Single Sign-On (SSO) capabilities across multiple platforms, including non-Microsoft environments. By managing web-based logon identities and tying them together, through Windows logon authentication, organizations can more easily manage customer access to web-based applications without compromising internal security infrastructure.

AD FS is managed from an MMC administrative tool, shown in Figure 8.6, and can be added as a server role in Windows Server 2012.

Image

Figure 8.6. Viewing the AD FS MMC administrative tool. ...

Get Windows Server® 2012 Unleashed now with the O’Reilly learning platform.

O’Reilly members experience books, live events, courses curated by job role, and more from O’Reilly and nearly 200 top publishers.