Masterclass: Managing Active Directory Federation Services for Multiple Organizations

Enterprise administrators, infrastructure architects, security professionals, systems engineers, network administrators, IT professionals, security consultants and other people responsible for implementing network and perimeter security.

At the end of the course you will be able to:

• Deploy AD Federation Services to provide claims-aware authentication for multiple organizations.
• Implement AD Federation Services high availability and load balancing.
• Implement Claims filtering and processing, to secure multi-organization enabled application.
• Script and backup ADFS environment.
• Automate business partner setup procedure for ADFS.
• Configure Active Directory for ADFS

Module 1:

a) Working with external parties
b) ADFS in Forest/Domain trust environment
c) Federating with different ADFS versions

Module 2:

a) Home Realm Discovery
b) Hacking ADFS Claims
c) Additional user authorization
d) Claim pipeline for multiple IdP
e) MFA in multi IdP environment

Module 3:
a) PowerShell Scripting for ADFS
b) Backup and Restore ADFS Config
c) Exporting and Importing RP and IdP

Module 4:
a) Working with clients
b) Creating automated Claim Provided Trust configuration for clients
c) Working with third party IdP

Module 5:

a) Load Balancing ADFS
b) Using IIS ARR to load-balance ADFS
c) Advance Clustering and load balancing

This course is intended for IT professionals who would like to implement and administer Active Directory Federation Services across the organizations. Prerequisite for the course is to have a medium level knowledge about Active Directory Domain Services, basic knowledge of Windows PowerShell and DNS. To attend this training, you should have good hands-on experience in administering Windows infrastructure.

 

Materials:

Exercises, presentation slides with notes. All exercises are based on newest Windows Server 2019 and Windows 10.