Planning ADFS-Enabled Web Server Placement

  • Article

Applies To: Windows Server 2003 R2

An Active Directory Federation Services (ADFS)–enabled Web server relies on ADFS Web Agents to check if incoming requests need to be authenticated, and if so, the server directs the requests to a resource federation server to perform the actual authentication. The ADFS Web Agents also parse the tokens and cookies that are issued by the federation server to determine if access to the given application should be granted.

You must place at least one ADFS-enabled Web server in the resource partner organization. See the following topics for details about determining when and where to create and place an ADFS-enabled Web server:

Note

Although this information may help with your placement planning for ADFS-enabled Web servers, it does not explain how to determine the proper number of ADFS-enabled Web servers or the server hardware requirements for each ADFS design. For more information about determining the proper number of ADFS-enabled Web servers for each design, see Planning for ADFS-enabled Web server capacity.

For examples of where ADFS-enabled Web servers can be placed in any of the three primary ADFS design scenarios, see Mapping Your Deployment Goals to an ADFS Design.

See Also

Concepts

Certificate requirements for ADFS-enabled Web servers
Name resolution requirements for ADFS-enabled Web servers