Install the AD FS Web Agent Role Service

  • Article

Applies To: Windows Server 2008

You can add an Active Directory Federation Services (AD FS) Web Agent to a Web server in a resource partner organization. You use the same procedure to add either the AD FS Web Agent for Windows NT token–based applications or the AD FS Web Agent for claims-aware applications. This action makes that server an AD FS-enabled Web server.

Membership in Administrators, or equivalent, on the local computer is the minimum required to complete this procedure. Review details about using the appropriate accounts and group memberships at Local and Domain Default Groups (https://go.microsoft.com/fwlink/?LinkId=83477).

To add an AD FS Web Agent to a Web server

  1. Click Start, point to Administrative Tools, and then click Server Manager.

  2. Right-click Roles, and then click Add Roles to start the Add Roles Wizard.

  3. On the Before You Begin page, click Next.

  4. On the Select Server Roles page, click Active Directory Federation Services. Click Next two times.

  5. On the Select Role Services page, do one of the following:

Note

If you are prompted to install additional Web Server (IIS) or Windows Process Activation Service role services, click Add Required Role Services to install them, and then click Next. 

  - To add AD FS Web Agent support for applications that can process AD FS claims directly for authorization, select the **Claims-aware Agent** check box, and then click **Next**.

Note

If your Web server will host only claims-aware applications, do not select the Windows Token–based Agent check box. 

  - To add AD FS Web Agent support for applications that require Windows native authorization mechanisms (that is, for applications that do not directly consume AD FS claims), select the **Windows Token–based Agent** check box, and then click **Next**.

Note

If your Web server will host only Windows NT token–based applications, do not select the Claims-aware applications check box.

  1. On the Specify Federation Server page, type the URL of a valid Federation Server, and then click Next. You can choose to verify that this Web server can contact the federation server by clicking the Validate button.

  2. After verifying the information on the Confirm Installation Selections page, click Install.

  3. On the Installation Results page, verify that everything installed correctly, and then click Close.