Share via


Mapping Your Deployment Goals to an AD FS Design

Applies To: Windows Server 2008

After you finish reviewing the existing Active Directory Federation Services (AD FS) deployment goals and you determine which goals are related to your deployment, you can map those goals to a specific AD FS design. For more information about AD FS predefined deployment goals, see Identifying Your AD FS Deployment Goals.

Use the following table to determine which AD FS design maps to the appropriate combination of AD FS deployment goals for your organization. This table refers only to the three primary AD FS designs, as described in this guide. However, you can create a hybrid or custom AD FS design by using any combination of the AD FS deployment goals to meet the needs of your organization.

AD FS deployment goal Web SSO Design Federated Web SSO Design Federated Web SSO with Forest Trust Design

Provide Federated Access for Your Employees on the Corporate Network

No

Yes, in the account partner

Yes, in the account partner

Provide Federated Access for Your Remote Employees on the Internet

No

Yes, optional in the account partner

Yes, optional in the account partner

Provide SSO Access for Customers to Your Hosted Applications

Yes

No

No

Provide Federated Access for Your Hosted Applications

No

Yes, in the resource partner

Yes, in the resource partner