Respondido Active Directory Federation Services

  • sexta-feira, 7 de setembro de 2012 07:38
     
     

    Hi,

    We are having three security zones in our network which are mentioned below. We have Domain Controllers in LAN and SZ2 zones at present. We have a requirement that there will be Sharepoint application server in SZ1 zone and that should authenticate users based on their AD credentials. As per security concerns we cannot open AD authentication ports between SZ1 and SZ2 zone.

    We are planning to use ADFS in SZ1 zone which will send authenticate the users using the DC in SZ2 Zone.

    I need help in designing the same and what all components I would require.

    • What is the port requirement for ADFS talking to AD
    • Do I need to place a ADFS Server in SZ1 as well as SZ2 also.
    • How will Sharepoint Authenticate using AD when it is not joined to Domain.

    Please suggest how to move forward with this.

    Security Zones

    DMZ(Internet Facing Zone)

    ==================Firewall===================


    SecureZone1
    (SZ1)

    =================Firewall====================


    Secure Zone2
    (SZ2)

    =================Firewall====================


    LAN

Todas as Respostas