Adding ADFS to existing AD Application

Question

We have an existing .NET application that uses Active Directory to authenticate users and search for user/OU data using DirectorySearcher object. Our customer has several AD servers and would like our existing application to authenticate/search from a single endpoint. Can we leverage our existing application by adding ADFS service to the customer's network to authenticate/search across several AD servers? Our application uses .NET System.DirectoryServices.DirectorySearch object using LDAP queries to authenticate and search for user/OU data.

Answer 1

You can leverage Active Directory Federation Services (ADFS) to achieve a unified authentication and authorization experience across multiple Active Directory (AD) servers in a network. ADFS provides a way to establish trust between different AD domains and forests, allowing for a single sign-on (SSO) experience across them.