ADFS Authentication with Multiple Forests for Remote Desktop Services

Hardeep Singh 1 Reputation point


How can I do ADFS Authentication with Multiple Forests for Remote Desktop Services?

I have an on-premises Remote Desktop environment and now we are merged with other company and they want to access our Remote Desktop Environment with their AD User through Active Directory Federation Services (ADFS).

They don't want to use a VPN tunnel for AD trust.

Is there any way, we can do ADFS Authentication with AD Forest trust for on-premises Remote Desktop environment?


Active Directory Federation Services
Active Directory Federation Services
An Active Directory technology that provides single-sign-on functionality by securely sharing digital identity and entitlement rights across security and enterprise boundaries.
953 questions
No comments
{count} votes

2 answers

Sort by: Most helpful
  1. Pierre Audonnet - MSFT 9,976 Reputation points Microsoft Employee

    Remote Desktop needs Windows users (either local or from an ADDS domain). You cannot replace RDP authentication with federation.
    You could publish an RDP gateway with web access and use federation to access the web part, but once on the gateway you would still need a user account on the target server.

    No comments

  2. Hardeep Singh 1 Reputation point

    Is this possible users from other AD Forest can access RDS from WebClient authentication with the federation services?