Active Directory Federation Services

This page is designed to help you connect with resources and documentation for Active Directory Federation Services (ADFS) in Windows Server 2003 R2. ADFS extends the ability to use single-sign-on (SSO) functionality that is available within a single security or enterprise boundary to Internet-facing applications so that your customers, partners, and suppliers can have a streamlined user experience while accessing Web-based applications.

Featured Articles

•	NEW! How to Use Active Directory Federation Services with Outlook Web Access for Exchange 2007 Learn how to configure Outlook Web Access as a Windows NT token–based application in your ADFS environment.

•	ADFS Step-by-Step Guide: Federation with Oracle Identity Federation Set up a test lab of ADFS and Oracle Identity Federation that performs cross-product identity federation.

•	ADFS Step-by-Step Guide: Federation with IBM Tivoli Federated Identity Manager Set up a test lab of ADFS and IBM Tivoli that performs cross-product identity federation.

•	ADFS Step-by-Step Guide: Federation with CA SiteMinder Federation Security Services Create a test lab environment with ADFS and CA SiteMinder FSS to evaluate cross-product identity federation. This guide requires an installation as described in the original Step-by-Step Guide for ADFS.

•	ADFS Design and Deployment Guide Read the entire design and deployment story for ADFS. This downloadable document combines content from both the ADFS Design Guide and the ADFS Deployment Guide into a single Word document to improve your searching and cross-linking experience.

•	Configure Web SSO authentication by using ADFS (Office SharePoint Server) Learn how to configure Microsoft Office SharePoint Server 2007 (also referred to as MOSS) as a claims-aware application in your ADFS environment.

•

Step-by-Step Guide for ADFS

Create a test lab environment where you can evaluate ADFS functionality by providing test users with federated access to a sample claims-aware application, a Microsoft Windows SharePoint Services team site, and a Microsoft Office SharePoint Portal Server 2003 site that is located in another organization.

•	Simplify Single Sign-on Using ADFS Use identity federations to make decisions based on identity data from other organizations, while also sharing selected information about their own users’ identities.

ADFS Technical Library

•	Product Evaluation ADFS Overview Learn about the new identity and access technology in Windows Server 2003 R2 that provides browser-based, single-sign-on (SSO) capabilities across business partners and to the Web.

•	Getting Started ADFS Product Help Get procedures for completing the ADFS wizards, along with basic information about ADFS components.

•	Planning and Architecture ADFS Design Guide Read descriptions of the elements for three basic ADFS designs, and decide the most appropriate design for your environment. Plan a new deployment of ADFS based on the requirements of your organization and the particular design that you want to create.

•	Deployment ADFS Deployment Guide Get prescriptive guidance about deploying one of the ADFS designs from the ADFS Design Guide in your production environment.

•	Operations ADFS Operations Guide Get information about administering and troubleshooting day-to-day operations for ADFS, including information about managing ADFS components, partnerships, accounts, and claims.

•	Development ADFS SDK Overview See the ADFS section in the Microsoft Windows SDK on the MSDN Web site for descriptions of ADFS classes.

•

Top Issues

•	Windows SharePoint Services and SharePoint Portal Server 2003 Support boundaries for Active Directory Federation Services
•	The role provider and the membership provider cannot be called from Windows SharePoint Services 3.0 on a Windows Server 2003 R2-based computer that is running ADFS and Microsoft Windows SharePoint Services 3.0
•	You cannot use ADFS to extract binary Active Directory attributes on a computer that is running Windows Server 2003 R2
•	Error message when a client tries to access resources on a Web site that uses ADFS: "Access is Denied"

•