ADFS and AD

Legacy Contributor

Does anyone know how ADFS connects with AD?  With ldapbind I was able to

make changes to the bind by connecting with ldapbind.....

Legacy Contributor

Not sure about the nature of the question. ADFS uses AD as an "identity provider". It can also use other SAML 2.0-compliant federation services as "federation partners". None of that has much to do with Lawson authentication really, since Lawson needs to be configured in a very specific way, and really only connects to a local ADFS. The rest is done "inside" ADFS.



ADFS can use several sign-in protocols (WS-FED, SAML, OAuth), and can also use a variety of authentication protocols (kerberos, OAuth, Form-based etc). Some of these protocols have the same names (to make it even more confusing), and some of the data items used in a course of the data exchange also have the same names (again, to make it even more confusing )



Here is one discussion about ADFS deep-dive terminology that might clarify some of it:

blogs.technet.microsoft.com/.../



If you have questions about specific details, feel free to ask.



Alex.