部署 AD FS 計劃Planning to Deploy AD FS

適用於:Windows Server 2016、Windows Server 2012 R2、Windows Server 2012Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

您會收集關於您的環境資訊,您可以選擇在 Active Directory 同盟服務 (AD FS) 設計依照下列指導方針中的後Windows Server 2012 中 AD FS 程式設計指南,就可以開始您的組織 AD FS 設計部署計劃。After you collect information about your environment and you decide on an Active Directory Federation Services (AD FS) design by following the guidance in the AD FS Design Guide in Windows Server 2012, you can begin to plan the deployment of your organization's AD FS design. 已完成的設計和本主題中的資訊,您可以判斷部署 AD FS 您在組織中的執行的工作。With the completed design and the information in this topic, you can determine which tasks to perform to deploy AD FS in your organization.

審查您的 AD FS 設計Reviewing your AD FS design

設計建構原始 AD FS 設計團隊組織不同於部署小組的實際會執行部署,請確定部署小組評論設計團隊的最終設計。If the design team that constructed the original AD FS design for your organization is different from the deployment team that will actually implement the deployment, make sure that the deployment team reviews the final design with the design team. 檢視關於設計下列重點:Review the following points regarding the design:

  • 若要判斷在您的企業網路或周邊網路聯盟伺服器配置最佳實體拓撲設計團隊的策略。The design team's strategy to determine the best physical topology for the placement of federation servers in your corporate network or perimeter network. 本主題的文件可以參考部署小組所檢視的下列主題 AD FS 設計節目表中:The deployment team can refer to documentation about this subject by reviewing the following topics in the AD FS Design Guide:

    很可能設計團隊,可能會使保留聯盟伺服器或聯盟伺服器 proxy 配置部署小組的主題。It is possible that the design team might leave the subject of federation server or federation server proxy placement for the deployment team. 部署小組負責然後文件並執行實體拓撲的伺服器。The deployment team is then responsible for documenting and implementing the physical topology of the servers.

  • 適用於您組織的指定為宣告提供者、信賴,或兩者記載 AD FS 設計的範圍中企業的原因。The business reasons for your organization's designation as a claims provider, relying party, or both, within the scope of the documented AD FS design. 確定原因為何要部署 AD FS 與其他公司或組織哪些部署小組的成員,了解聯盟合作關係與有關。Ensure that members of the deployment team understand the reasons why AD FS is being deployed and what other companies or organizations are involved in the federation partnership. 確保部署小組的成員也會了解其他公司或組織限制 \(有限的硬體,不外部環境,以及如此 forth\),可能會限制的一些方式設計範圍。Ensure that members of the deployment team also understand the constraints that exist for the other companies or organizations (limited hardware, no extranet environment, and so forth) that may limit the scope of the design in some way. 合作夥伴公司的相關詳細資訊,請查看規劃您部署For more information about partner organizations, see Planning Your Deployment.

之後設計團隊和部署團隊同意這些問題,就可以繼續 AD FS 設計的部署。After the design teams and deployment teams agree on these issues, they can proceed with the deployment of the AD FS design. 如需詳細資訊,請查看實作您 AD FS 設計計劃For more information, see Implementing Your AD FS Design Plan.