Table of contents
TOC
Collapse the table of content
Expand the table of content

Mapping Your Deployment Goals to an AD FS Design

Bill Mathers|Last Updated: 2/22/2017

Applies To: Windows Server 2016, Windows Server 2012 R2, Windows Server 2012

After you finish reviewing the existing Active Directory Federation Services (AD FS) deployment goals and you determine which goals are related to your deployment, you can map those goals to a specific AD FS design. For more information about AD FS predefined deployment goals, see Identifying Your AD FS Deployment Goals.

Use the following table to determine which AD FS design maps to the appropriate combination of AD FS deployment goals for your organization. This table refers only to the two primary AD FS designs, as described in this guide. However, you can create a hybrid or custom AD FS design by using any combination of the AD FS deployment goals to meet the needs of your organization.

AD FS deployment goalWeb SSO DesignFederated Web SSO Design
Provide Your Active Directory Users Access to Your Claims-Aware Applications and ServicesNoYes, in the account partner
Provide Your Active Directory Users Access to the Applications and Services of Other OrganizationsNoYes, optional in the account partner
Provide Users in Another Organization Access to Your Claims-Aware Applications and ServicesYesYes

See Also

AD FS Design Guide in Windows Server 2012

© 2017 Microsoft