Mapping Your Deployment Goals to an AD FS Design
Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012
After you finish reviewing the existing Active Directory Federation Services (AD FS) deployment goals and you determine which goals are related to your deployment, you can map those goals to a specific AD FS design. For more information about AD FS predefined deployment goals, see Identifying Your AD FS Deployment Goals.
Use the following table to determine which AD FS design maps to the appropriate combination of AD FS deployment goals for your organization. This table refers only to the two primary AD FS designs, as described in this guide. However, you can create a hybrid or custom AD FS design by using any combination of the AD FS deployment goals to meet the needs of your organization.
|AD FS deployment goal||Web SSO Design||Federated Web SSO Design|
|Provide Your Active Directory Users Access to Your Claims-Aware Applications and Services||No||Yes, in the account partner|
|Provide Your Active Directory Users Access to the Applications and Services of Other Organizations||No||Yes, optional in the account partner|
|Provide Users in Another Organization Access to Your Claims-Aware Applications and Services||Yes||Yes|
We'd love to hear your thoughts. Choose the type you'd like to provide:
Our feedback system is built on GitHub Issues. Read more on our blog.