Mapping Your Deployment Goals to an AD FS Design

Applies To: Windows Server 2008

After you finish reviewing the existing Active Directory Federation Services (AD FS) deployment goals and you determine which goals are related to your deployment, you can map those goals to a specific AD FS design. For more information about AD FS predefined deployment goals, see Identifying Your AD FS Deployment Goals.

Use the following table to determine which AD FS design maps to the appropriate combination of AD FS deployment goals for your organization. This table refers only to the three primary AD FS designs, as described in this guide. However, you can create a hybrid or custom AD FS design by using any combination of the AD FS deployment goals to meet the needs of your organization.

AD FS deployment goal	Web SSO Design	Federated Web SSO Design	Federated Web SSO with Forest Trust Design
Provide Federated Access for Your Employees on the Corporate Network	No	Yes, in the account partner	Yes, in the account partner
Provide Federated Access for Your Remote Employees on the Internet	No	Yes, optional in the account partner	Yes, optional in the account partner
Provide SSO Access for Customers to Your Hosted Applications	Yes	No	No
Provide Federated Access for Your Hosted Applications	No	Yes, in the resource partner	Yes, in the resource partner