Description

Introduction of ADFS in Windows Server 2019

Active Directory Federation Services (ADFS) in Windows Server 2019 enables organizations to extend their on-premises Active Directory (AD) identities to the cloud, providing seamless single sign-on (SSO) and secure authentication for users accessing both on-premises and cloud-based applications. This service helps to establish trust between different security domains, allowing users from one domain to access resources in another domain without needing to remember separate credentials. This training is designed to provide comprehensive knowledge on configuring and managing ADFS in Windows Server 2019.

Prerequisites of ADFS

1. Basic understanding of Active Directory concepts and infrastructure.
2. Familiarity with Windows Server 2016 or later versions.
3. Knowledge of networking, DNS, and SSL/TLS protocols.
4. Experience with PowerShell and managing Windows Server environments.
5. Recommended: Experience with Identity and Access Management (IAM) solutions.

TABLE OF CONTENT

1: Introduction to ADFS
1.1 Overview of Active Directory Federation Services (ADFS)
1.2 ADFS Role in Identity and Access Management
1.3 Key Features of ADFS

2: ADFS Installation and Configuration
2.1 Prerequisites for ADFS Installation(Ref: Aruba ACCP: ClearPass Configuration and Policy Management)
2.2 Installing ADFS on Windows Server 2019
2.3 Configuring ADFS Farm
2.4 ADFS Service Account and Database Options

3: ADFS Trust Relationships
3.1 Understanding Trust Relationships in ADFS
3.2 Configuring Relying Party Trusts
3.3 Claims Providers and Transformation Rules

4: ADFS Authentication
4.1 Authentication Methods in ADFS
4.2 Multi-Factor Authentication (MFA) Setup
4.3 ADFS Extranet Lockout and Smart Lockout

5: ADFS High Availability and Disaster Recovery
5.1 Load Balancing ADFS Servers
5.2 ADFS Farm Backup and Restore
5.3 Planning for ADFS Disaster Recovery

6: ADFS Monitoring and Logging
6.1 ADFS Auditing and Logging
6.2 Monitoring ADFS Health
6.3 Troubleshooting Common ADFS Issues

7: ADFS and Web Application Proxy
7.1 Configuring Web Application Proxy (WAP)
7.2 Publishing Applications through WAP
7.3 Securing Remote Access with ADFS and WAP

8: ADFS Integration with Azure AD
8.1 ADFS and Azure AD Integration Scenarios
8.2 Federating On-Premises Active Directory with Azure AD
8.3 Managing Identities in Hybrid Environments

Reference