Search code examples
adfsadfs2.0ws-federationadfs3.0federation

Can and organization use separate Windows Server 2012 AD as bridge server to windows 2008 AD server to be able to federate to an Application?

I hope I am clear on explaining the issue since I am very new to AFDS and federation world.

Here is the requirement.

Customer has windows 2008 and ADFS 2.0 (which doesn't not have any plan what so ever to upgrade their servers to new versions) trying to federate with our Application which only support ADFS 3.0 and above.

Is it possible to use a windows server 2012 with adfs 3.X as a bridge server that can have trust relation with their windows 2008 AD and use 2012 to federate with our application?

Solution

  • Yes - simply federate your ADFS 3.0 with their ADFS 2.0.

    Just swop metadata and decide who will be the CP and who will be the RP. So on the one side add the ADFS as a claims provider and on the other side add the ADFS as a relying party.