This Active Directory Federation Services wiki page is intended to act as a content map for all members of the AD FS community. Members of the AD FS product team will occasionally monitor this article and post new links as necessary. We would like to enlist your help in adding useful links to this article in order to make hot AD FS topics and solutions more discoverable to the overall community.
Bookmark this page as : http://aka.ms/adfscontentmap.
The following TOC list can be used to help you quickly jump to the relevant content category that is most applicable to your AD FS documentation needs.
↑ Back to top
You might also find this versioning and installation information useful:
AD FS 2.0:
AD FS in Windows Server 2012: It can be added and configured as a server role via Server Manager in Windows Server 2012.
AD FS in Windows Server 2012 R2: It can be added and configured as a server role via Server Manager in Windows Server 2012 R2.
With Windows Server 2012 R2 new version of AD FS arrived. Not all details are fully documented but there are a lot of new functionality. And no direct upgrade path.
The following resources can be useful for obtaining AD FS community support and for keeping up with the latest AD FS content updates and news.
Wow, this is very in depth! Great job, Nick!
Very cool! thanks!
The article "Forefront UAG and ADFS: Better together" above refers to ADFS 1.0 not 2.0.
e.g.
•Requires agents to be incorporated into the web application – unless using Token agent.
ADFS v2.0 does not have agents
•ADLDS or Active Directory can be used as the account store.
ADFS v2.0 only allows ADDS not ADLDS
Awesome ADFS reference - thanks very much.
The best ADFS reference out there!
I'm surprised there is no information in regards to managing Relying Party Trust certificates. When you have numerous RPs, each with their own certificates and expiration dates, being able to quickly and easily see this information is important to business.
Is there a way to list all of the expiration dates of the Relying Party Trust certificates?
Powershell can list the Relying Party Trust information by using the get-adfsrelyingpartytrust. The certificate information is under the EncryptionCertificate portion, but the EncryptionCertificate info cannot specifically be queried by itself to show only the expiration dates of all the servers.
The closest thing I have been able to come up with is this command:
Get-ADFSRelyingPartyTrust | Format-List Name, EncryptionCertificate
However, this still shows too much information and it is not something that can be easily exported to a CSV file to have a column specifically for expiration date in order to easily manage and see expiring certificates for our clients (in order to be proactive).
I have scoured the web and cannot find one thing remotely close to this. I'm surprised no other organizations have requested this information.
I've increased readability of this article.
Is there anybody at MS that knows how to create a Word document?
Excellent one !!!
Nick Great job on the content!