Federation or Trust

Question

Hi,

We have today a local domain, and we have bought a company that have their own domain, and we are not going to have one domain. That company want to access our local file server, and we would like to know if its best to configure federation or Trust ?

What are the comparison between these, specifically what are the negative conditions.

I don't have any experience with federation or trust, but after some reading it seems like trust is the best way ? If we use a site-to-site vpn then should that enough security ?

One other thing is that if the other company say for example get a ransome virus, and as I understand ransomewear use SMB to spread, what would be a recommended way to stop spreading from the other company.

Thanks for any answers, hopefully some explanation and not only links :)

/Regards
Andy

Answer 1

Hello,

Thank you for your question.

If you are going to use some web applications of other companies then Federation is best way and you may need to do some complex configuration in ADFS server and Firewalls proxy.

But If you are going to use File sharing resources or Authentication with other company's Servers or Computer then AD Trust will be best way and its easy configure. all you need to do is to set up VPN between two companies and open AD ports,

https://social.technet.microsoft.com/Forums/en-US/d2921c35-8c3e-42a2-a1a1-7708d0d0bb65/trust-vs-federation?forum=ADFS

Regarding SMB ransomware you could tighten your security from Firewall and using Antivirus or security software.

Hope this helps.

---

--If the reply is helpful, please Upvote and Accept as answer--