Active Directory Federation ServiceThat is to say, the Federated identity authentication service is Microsoft's Single Sign-On solution (SSO). It has many configuration steps and a small amount of Chinese information. I hope it will be helpful to later users, the language uses a Chinese system. In fact, it may be easier to deploy it in English, because the translation is not very good.
- Terms
- Active Directory (AD)The Active Directory abstracts and manages resources, users, and computers on the server in the form of directories. Windows Server comes with the directory.
- DomainComputer domain is a better way to organize internal computers than working groups. Unlike Working Groups, the domain uses domain users as authentication creden。, rather than the computer itself, and the domain does not require all computers to be in the same LAN.
- Commencement
- Install Windows server on your computer (more than 2003) and configure the administrator password.
- Install the ad domain service and DNS Service
- Configure the computer domain.
- Finally, you can see the following in the Active Directory domain console:
- Configure a fixed IP address and set the DNS server to itself
- Now you can configure ADFs, and make some preparations before that.
- The ADFs service requires an SSL certificate. I don't want to talk about how to apply for the certificate here, because this is not the point. I find a convenient method to install the Certificate Service ca, which is generated by default.
- After installation, You need to configure
- You can finally install ADFs with sufficient conditions.
- Configure ADFs
- Success
