How do the different versions of AD FS affect functionality?

Discussing the different version of AD FS would make for a long topic. Probably the most relevant thing to note is that Windows Server® 2012 R2 includes the latest version (3.0) as a role that can be installed through a wizard in the Server Manager. Version 3.0 allows options for customization, improved user access management, […]

What is Workplace Join?

Workplace Join is the function that allows users to register devices with the domain through the Device Registration Service. This allows the devices to access resources hosted in the domain.

What is the Device Registration Service (DRS)?

DRS is a feature of AD FS that facilitates Workplace Join, which allows users to register devices to be known entities to the domain. DRS creates a device object in an AD user account and issues a certificate to the device that represents its identity when authenticating to the domain.

What is a relying party trust?

It designates a service provider as a partner organization for AD FS. The service provider is a relying party that AD FS will trust authentication requests from. For example, AD FS can trust authentication requests from Salesforce when there is a relying party trust.

What resources can AD FS be used for?

To answer this fully would make for a very long list. But a few examples include SharePoint®, Office 365TM, AzureTM, Amazon Web Services, Google DocsTM, PeopleSoft®, and Salesforce®.

What are the requirements to deploy AD FS?

 Infrastructure requires: Separate hardware for AD FS. Active Directory DNS Also, there are three types of certificates are required: Server Communication Certificate – an SSL certificate issued from a reputed public CA is recommended, but an internal CA can be used. Token Signing Certificate – a self-signed certificate is created when AD FS is configured […]