Capabilities

Active Directory Federation Services (ADFS), a software component developed by Microsoft, can run on Windows Server operating systems to provide users with minimal sign-on access to systems and applications located across organizational boundaries. It uses a claims-based access-control authorization model to maintain application security and implement a federated identity. In ADFS, identity federation is established between two organizations by establishing trust between two security realms. ADFS integrates with Active Directory Domain Services, using it as an identity provider. It also can interact with SAML 2.0 compliant federation services as federation partners.