ADFS

In the Ultra Transcenders books

2V0-17.25SC-300

Each book explains ADFS in context, with comparison tables and the common traps.

Terms in this definition

• AD FS

  Short for Active Directory Federation Services, a federation server hosted on-premises. Its older publishing role, Web Application Proxy, is a separate thing from Microsoft Entra application proxy.

• IDENTITY

  A column property, written IDENTITY(seed, increment), that gives each new row the next number in a rising sequence. SCOPE_IDENTITY reports the latest value created in the current scope, and a rolled-back transaction still uses up the numbers it took.

• Federation

  An arrangement in which separate identity providers trust one another, letting people use the account from their home organisation to reach services in another domain. In a hybrid setup, Entra ID can pass sign-ins over to a federation service like AD FS.

• VCF Identity Broker

  Identity service introduced with VCF 9.0 that signs in users of fleet components by linking VCF Single Sign-On with the company's identity provider. It runs either embedded within vCenter or as a cluster of three appliance nodes.

• Identity provider

  Microsoft Entra ID is one example: a system that keeps identity records up to date and lets applications hand off sign-in, permission checks and logging to it.

• OVER

  Gives a T-SQL window function its window: PARTITION BY, ORDER BY and, if wanted, a ROWS or RANGE frame. Rankings and running totals can then be worked out while every row is kept.

• OIDC

  OpenID Connect, an OAuth 2.0-based identity standard that issues JSON ID tokens. VCF Identity Broker supports it, alongside SAML 2.0, for external IdPs.

• SAML

  Security Assertion Markup Language: a federation protocol for single sign-on, which non-gallery apps added as enterprise applications commonly use.