Configure the Account Store Priority

Applies To: Windows Server 2003 R2

When you add more than one account store, account store priority determines the order in which account stores will be used by Active Directory Federation Services (ADFS). ADFS will attempt to authenticate users beginning with the first account store. Only if authentication fails for a user will ADFS attempt to authenticate the user with the next account store in the list. ADFS will attempt to authenticate a user until the user is successfully authenticated or until all account stores have been attempted. ADFS will stop attempting additional account stores as soon as one account store successfully authenticates a user.

User identity attributes that are provided by account stores are not cumulative. ADFS is aware only of user identity attributes that are provided by the account store that is used to authenticate the user.

Configure the account store priority

You can use the following procedure to configure the account store priority.

To configure the account store priority

  1. Click Start, point to Administrative Tools, and then click Active Directory Federation Services.

  2. In the console tree, double-click Federation Service, Trust Policy, and My Organization.

  3. Right-click Account Stores, and then click Store Priority.

  4. In the Account Store Prioritization dialog box, select an account store, use the Up and Down buttons to move the account store in the priority list, and then click OK.

See Also

Concepts

Account stores
Federation Service