Course 50412B: Implementing Active Directory Federation Services 2.0
24 February 2012
About this course
Audience profileThis four-day instructor-ledcourse provides students with the knowledge and skills to install and configure Active Directory Federation Services 2.0 (AD FS). The course focuses on terminology, user interfaces, and common configuration scenarios for AD FS. Students will learn how to design AD FS environments and supporting technology such as a Public Key Infrastructure. Students will also learn how to design AD FS for security and high availability.At course completionThis course is intended for Windows IT professionals who want to become Active Directory Federation Services (AD FS) enterprise administrators, and move into the role of designing AD FS environments.After completing this course, students will be able to:
- Define key concepts and terminology relating to Active Directory Federation Services 2.0.
- Install and configure Windows prerequisites for AD FS 2.0.
- Install and configure Public Key Infrastructure (PKI) for AD FS 2.0.
- Deploy AD FS 2.0 to provide claims-aware authentication in a single organization.
- Configure AD FS 2.0 to provide claims-aware authentication in a business-to-business federation.
- Design and deploy advanced AD FS 2.0 scenarios, including providing for high availability and SAML interoperability.
- Use the AD FS 2.0 claims rule language to create custom claim rules.
- Troubleshoot AD FS 2.0.
- Course details
Course OutlineModule 1: Introducing Claims-based IdentityThis module explains how to recognize AD FS terminology and common use cases for AD FS 2.0.Lessons
Module 2: AD FS PrerequisitesAfter completing this module, students will be able to:
- Introducing the Identity Metasystem
- Existing Solutions for Managing Identities
- The Benefits of Claims-based Identity
- The Evolution of AD FS
- Use Cases for AD FS
- AD FS and Claims-based Terminology
This module explains how to configure Windows prerequisites for AD FS 2.0, including Windows Server and Internet Information Services (IIS). This module also explains how AD FS 2.0 utilizes Web services to achieve interoperability.Lessons
- Discuss and describe the Seven Laws of Identity, and how they pertain to managing identities for users and applications.
- Examine existing solutions for managing identities.
- Describe the benefits of the Claims-based Identity model.
- Discuss the evolution of Active Directory Federation Services (AD FS).
- Describe common use cases for AD FS.
- Discuss common terminology used when working with AD FS and Claims-based Identity.
Module 3: Public Key Infrastructure (PKI)After completing this module, students will be able to:
- Windows Prerequisites
- Introducing Directory Services
- Active Directory and Active Directory Lightweight Directory Services
- Web Services, Standards, and Interoperability
- Internet Information Services
This module explains how to install and configure the Public Key Infrastructure (PKI) requirements necessary to deploy AD FS 2.0.Lessons
- Identify the key Windows components required for AD FS.
- Describe the key characteristics of a Directory Service.
- Describe the role Active Directory and AD LDS perform in an AD FS deployment.
- Describe what is meant by the terms Web Services, WS-*, and Security Assertion Markup Language (SAML).
- Recognize the role of IIS in a successful AD FS deployment.
Module 4: AD FS 2.0 ComponentsAfter completing this module, students will be able to:
- Introducing the Public Key Infrastructure
- PKI Basics
- Introduction to Cryptography
- PKI Design
- Installing and Configuring Certificate Services
This module explains how to install and configure the Windows Identity Foundation (WIF), and how to install the AD FS 2.0 service in the federation server role.Lessons
- Describe the concepts of a Public Key Infrastructure (PKI).
- Define and discuss the basics of PKI.
- Describe symmetric key and public key cryptography.
- Discuss options for PKI design.
- Describe the steps needed to install and configure Certificate Services.
Module 5: Claims-based Authentication in a Single OrganizationAfter completing this module, students will be able to:
- The Federation Server Role
- Claims Types, Endpoints, and Attribute Stores
- AD FS Security
- The Federation Server Proxy Role
- Administering AD FS
- Windows Identity Foundation
This module explains how to design and deploy AD FS 2.0 to provide claims-based authentication within a single organization.Lessons
- Describe the role of the federation server in an AD FS 2.0 installation.
- Understand the importance of claims, claim types, endpoints, and attribute stores for a successful AD FS implementation.
- Discuss best practices for securing an AD FS implementation, including the role of Public Key Infrastructure (PKI) certificates in securing the authentication and communication process.
- Describe the role of the Federation Server Proxy.
- Describe the methods available to administer an AD FS server.
- Understand the role of the Windows Identity Foundation (WIF) in creating claims-based applications.
Module 6: Claims-based Authentication in a Business-to-Business FederationAfter completing this module, students will be able to:
- Preparing for AD FS in a Single Organization
- AD FS Within a Single Organization
- Understanding Claims and Claim Types
- Claim Rules and Claim Rule Templates
- Creating Claim Rules from Templates
- Configuring AD FS in a Single Organization
This module explains how to design and deploy AD FS 2.0 to provide claims-based authentication in a business-to-business federation scenario.Lessons
- Define the certificate requirements for AD FS in a single organization.
- Discuss PKI certificate management for AD FS.
Module 7: Advanced AD FS Deployment ScenariosAfter completing this module, students will be able to:
- Deploying AD FS in a Federated Environment
- Configuring a Claims Provider Trust
- Understanding Home Realm Discovery
- Managing Claims Across Organizations
This module explains how to deploy an AD FS server as a federation server proxy. It also explains how to design an AD FS deployment to create a high-availability configuration, and how to configure AD FS 2.0 to achieve interoperability with SAML 2.0-compatible products and applications.Lessons
- Deploy AD FS 2.0 in a business-to-business federation.
- Configure an AD FS Claims Provider Trust.
- Describe and configure the Home Realm Discovery process.
- Manage AD FS Claims and Federation Trust relationships across organizations.
Module 8: The AD FS Claims Rule LanguageAfter completing this module, students will be able to:
- Implementing the Federation Server Proxy
- Planning for High Availability
- Additional AD FS Configuration Scenarios
- AD FS 2.0 and SAML Interoperability
This module explains how to configure custom AD FS claim rules using the AD FS 2.0 claim rule language.Lessons
- Configure the AD FS 2.0 server in the Federation Server Proxy role.
- Configure AD FS 2.0 for redundancy and high availability.
- Deploy AD FS 2.0 to provide interoperability with SAML 2.0-compliant federation partners.
Module 9: AD FS TroubleshootingAfter completing this module, students will be able to:
- Reviewing the Claims Pipeline and Claims Engine
- Introducing the Claims Rule Language
This module explains how to audit, troubleshoot, and trace AD FS 2.0 components and claims-aware applications, at both the server and client level.Lessons
- Describe the AD FS 2.0 Claims Pipeline and Claims Engine processes.
- Create and configure custom claim rules using the AD FS 2.0 claim rule language.
After completing this module, students will be able to:
- Configuring Auditing for AD FS
- AD FS Troubleshooting
- Tracing AD FS Traffic
- Configure troubleshooting and security auditing for AD FS 2.0.
- Use built-in Windows tools to troubleshoot AD FS components and prerequisites.
- Trace AD FS Web traffic for troubleshooting and configuration purposes.
Before attending this course, students must have:
- Basic understanding of networking.
- Intermediate understanding of network operating systems.
- An awareness of security best practices.
- Basic knowledge of server hardware.
- Some experience creating objects in Active Directory.
- Foundation course (6424) or equivalent knowledge.
- Basic concepts of backup and recovery in a Windows Server Environment.
Looking for training resources, events and advice from peers? Join the Microsoft Training and Certification Community.
Preparing for an exam now? Find your Microsoft Certification Study Group.
Talk to us on these social networks: