This 4 day instructor-led training class is presented by Microsoft training partners to their end customers. Training partners in North America and the UK hire proven AMS Subject Matter Expert Microsoft Certified Trainers (MCT’s) to teach on-site and on-line classes.
This class provides students with the knowledge and skills to install and configure Active Directory Federation Services 2.0 (AD FS). The class focuses on terminology, user interfaces, and common configuration scenarios for AD FS. Students will learn how to design AD FS environments and supporting technology such as a Public Key Infrastructure. Students will also learn how to design AD FS for security and high availability.
Intended Audience:
This course is intended for Windows IT professionals who want to become Active Directory Federation Services (AD FS) enterprise administrators, and move into the role of designing AD FS environments.
Class Objectives:
• Define key concepts and terminology relating to Active Directory Federation Services 2.0.
• Install and configure Windows prerequisites for AD FS 2.0.
• Install and configure Public Key Infrastructure (PKI) for AD FS 2.0.
• Deploy AD FS 2.0 to provide claims-aware authentication in a single organization.
• Configure AD FS 2.0 to provide claims-aware authentication in a business-to-business federation.
• Design and deploy advanced AD FS 2.0 scenarios, including providing for high availability and SAML interoperability.
• Use the AD FS 2.0 claims rule language to create custom claim rules.
• Troubleshoot AD FS 2.0.
Class Outline:
I. Module 1: Introducing Claims-based Identity
1. Introducing the Identity Metasystem
2. Existing Solutions for Managing Identities
3. The Benefits of Claims-based Identity
4. The Evolution of AD FS
5. Use Cases for AD FS
6. AD FS and Claims-based Terminology
II. Module 2: AD FS Prerequisites
1. Windows Prerequisites
2. Introducing Directory Services
3. Active Directory and Active Directory Lightweight Directory Services
4. Web Services, Standards, and Interoperability
5. Internet Information Services
III. Module 3: Public Key Infrastructure (PKI)
1. Introducing the Public Key Infrastructure
2. PKI Basics
3. Introduction to Cryptography
4. PKI Design
5. Installing and Configuring Certificate Services
IV. Module 4: AD FS 2.0 Components
1. The Federation Server Role
2. Claims Types, Endpoints, and Attribute Stores
3. AD FS Security
4. The Federation Server Proxy Role
5. Administering AD FS
6. Windows Identity Foundation
V. Module 5: Claims-based Authentication in a Single Organization
1. Preparing for AD FS in a Single Organization
2. AD FS Within a Single Organization
3. Understanding Claims and Claim Types
4. Claim Rules and Claim Rule Templates
5. Creating Claim Rules from Templates
6. Configuring AD FS in a Single Organization
VI. Module 6: Claims-based Authentication in a Business-to-Business Federation
1. Deploying AD FS in a Federated Environment
2. Configuring a Claims Provider Trust
3. Understanding Home Realm Discovery
4. Managing Claims Across Organizations
VII. Module 7: Advanced AD FS Deployment Scenarios
1. Implementing the Federation Server Proxy
2. Planning for High Availability
3. Additional AD FS Configuration Scenarios
4. AD FS 2.0 and SAML Interoperability
VIII. Module 8: The AD FS Claims Rule Language
1. Reviewing the Claims Pipeline and Claims Engine
2. Introducing the Claims Rule Language
IX. Module 9: AD FS Troubleshooting
1. Configuring Auditing for AD FS
2. AD FS Troubleshooting
3. Tracing AD FS Traffic
To Hire an AMS Microsoft Windows Server Subject Matter Expert Consultant and Instructor who also teaches this class, call 800-798-3901 today!