Overview

The Active Directory Federated Service (ADFS) is a service that is installed on the top of the Active Directory. It enables Federated Identity and Access Management. ADFS acts in the Identity Provider (IP) side which authenticates the user from Active Directory Domain Services, and then issue a token that contains a series of claim about user, which includes its identity. On the resources side, the Service Provider (SP) issues an access control to the accepted claim of identity for the service.

Flow diagram of SAML based ADFS Integration