Cours Integrating Domain Name System with active directory, tutoriel & guide de travaux pratiques en pdf.

What Is Identity Federation?

Identity Federation:
Enables user access to resources between different organizations or different server platforms
Allows an organization to retain control over who can access resources
Requires an identity federation partnership to provide a form of trust between two organizations
Provides an agreement to define which resources will be accessible to the other organization and how access to the resources will be enabled

Identity Federation Scenarios

Identity federation allows secure and efficient communication and collaboration in the following three scenarios:
Business- To-Business (B2B)
Business- To-Employee (B2E)
Business- To-Consumer (B2C)

Discussion: Identity Federation
Business Requirements

• What business requirements would lead to the deployment of an identity federation solution?

What Is a Federation Trust?
A federation trust relationship provides efficient communication
between organizations.
Federation trust: This is the embodiment of a partnership
between two organizations
Account partner: This stores and manages user accounts in
Active Directory® store or AD LDS
Resource partner: This hosts the Web servers that host Web-based applications

AD FS Deployment Considerations
AD FS scenario to be deployed
Certificate management
Directory store requirements
Application type
Consider the following when planning an AD FS solution.

AD FS System Requirements
One of the following:
Windows Server® 2003 R2 Enterprise Edition
Windows Server® 2003 R2 Datacenter Edition
Windows Server® 2008 Enterprise
Windows Server® 2008 Datacenter
AD FS requirements for the Federation Service, Federation Service Proxy and
FD FS Web Agent Roles:
Internet Information Services (IIS)
A Web site with Transport Layer Security/Secure Sockets Layer (TLS/SSL)
configured
Microsoft® ASP.NET 2.0
Microsoft® .NET Framework 2.0

……..