Active Directory Federation Service (ADFS)  Enterprise Edition: Overview, Comparison, Pricing and Alternatives

What is ADFS?

Active Directory Federation Service (ADFS) may be a software component developed by Microsoft to supply Single Sign-On (SSO) authorization service to users on Windows Server Operating Systems(WSOS). ADFS allows users across organizational boundaries to access applications on Windows Server Operating Systems employing a single set of login credentials.

ADFS makes use of claims-based Access Control Authorization model to make sure security across applications using federated identity. Claims-based authentication may be a process during which a user is identified by a group of claims associated with their identity. 

How does ADFS work?

The authentication process using the Active Directory Federation Service (ADFS), takes place within the following steps:

The user navigates to a service, for example, a partner-company website (http://example.com) to obtain pricing or product details.

The website requests an authentication token.

User requests token from the ADFS server.

User forwards token to the partner-company website.

The website grants authorization access to the user.

ADFS Components

• Active Directory: The Identity Information which is to be employed by ADFS is stored on the Active Directory.

• Federation Server: It contains the tools need to manage trusts between business partners. It processes authentication requests coming in from external users and hosts a security token service that issues tokens for claims supported verification of credentials from AD.

• Federation Server Proxy: The Proxy is deploy on the extranet of the organization, to which external clients connect when requesting a security token. It forwards these requests to the Federation Server. The Federation server isn't exposed on to the web to stop security risks.

• ADFS Web Server: It hosts the ADFS Web Agent which manages the safety tokens and authentication cookies sent thereto for authentication purposes.

ADFS Office 365 example:

Office 365 uses a lively Directory environment wherein a fanatical domain is made on the cloud for every user’s Office 365 subscription.

ADFS is employed here by fixing directory synchronization (DirSyc tool) that makes accounts in Microsoft’s domain matching the accounts within the user’s domain.

A user can select accounts which should be synchronized within the AD.

Why ADFS is employed by organisations?

Using Active Directory (AD) within the connected online world creates authentication challenges. AD cannot authenticate users who attempt to access integrated applications externally. within the modern workplace, users often got to access applications that aren't owned or managed by their organization’s AD. ADFS is in a position to resolve and simplify these third-party authentication challenges.

ADFS allows users from one organization to access applications of partner organizations using the quality credentials of their organization’s Active Directory (AD). ADFS also lets users access AD-integrated applications while working remotely using their standard organizational AD credentials via an internet interface. When establishing a partnership to use another organization’s web applications, ADFS provides a central place to manage and audit the worker identity information that's shared with their organization’s partners.

Over 90% of organizations use Active Directory, which suggests many use ADFS also .

ADFS are often utilized in the below scenarios:

Single Sign-On (SSO): ADFS are often wont to provide Single Sign-On (SSO) authorization to users who want to access applications located in several networks or organizations. .

Identity Federation (Identity Management): Federated Identity may be a concept where a user’s identity is centralized. This makes Identity Management easier. Identity Management is completed to take care of security while keeping the prices related to managing user identities, low.