3 ms·
Active Directory Federation Services (ADFS) can be used as a SAML 2.0 Identity Provider (iDP). This goes back to the introduction of ADFS in Windows Server 2003
by EvanAnderson 13y ago
Active Directory Federation Services (ADFS) can be used as a SAML 2.0 Identity Provider (iDP). This goes back to the introduction of ADFS in Windows Server 2003 R2.
- justizin 13y agoIn this case, they were probably using AD just because of Exchange, so if you want to ditch Exchange for Gmail, it's an odd choice to use AD as your identity provider, esp if you're a company known for wanting as little on-premise IT as possible.
- EvanAnderson 13y agoI would guess that they're using Active Directory because they have Windows PCs to manage. AD, arguably, provides a _lot_ of value if you have any quantity of Windows-based PCs that you want to manage centrally. I haven't seen any compelling third-party hosted offering to replace the SSO and Group Policy functionality in Windows client OS's that AD enables. Maybe when Samba4 reaches maturity that will change.