Editing Active Directory (section)

===Federation Services===
{{Main|Active Directory Federation Services}}
Active Directory Federation Services (AD FS) is a [[single sign-on]] service. With an AD FS infrastructure in place, users may use several web-based services (e.g. [[internet forum]], [[blog]], [[online shopping]], [[webmail]]) or network resources using only one set of credentials stored at a central location, as opposed to having to be granted a dedicated set of credentials for each service. AD FS uses many popular open standards to pass token credentials such as [[SAML]], [[OAuth]] or [[OpenID Connect]].<ref>{{cite web|title=Overview of authentication in Power Apps portals|url=https://docs.microsoft.com/en-us/powerapps/maker/portals/configure/configure-portal-authentication|website=[[Microsoft Docs]]|publisher=[[Microsoft]]|access-date=30 January 2022}}</ref> AD FS supports encryption and signing of [[SAML]] assertions.<ref>{{cite web|title=How to Replace the SSL, Service Communications, Token-Signing, and Token-Decrypting Certificates|url=https://social.technet.microsoft.com/wiki/contents/articles/2554.ad-fs-how-to-replace-the-ssl-service-communications-token-signing-and-token-decrypting-certificates.aspx|website=[[Microsoft TechNet|TechNet]]|publisher=[[Microsoft]]|access-date=30 January 2022}}</ref> AD FS's purpose is an extension of that of AD DS: The latter enables users to authenticate with and use the devices that are part of the same network, using one set of credentials. The former enables them to use the same set of credentials in a different network.

As the name suggests, AD FS works based on the concept of [[federated identity]].

AD FS requires an AD DS infrastructure, although its federation partner may not.<ref>{{cite web|title=Step 1: Preinstallation Tasks|url=https://technet.microsoft.com/en-us/library/cc771806%28v=ws.10%29.aspx|website=[[Microsoft TechNet|TechNet]]|publisher=[[Microsoft]]|access-date=21 October 2021}}</ref>