Virtual Identity Server Federation Services

Extending the functionality of Active Directory Federation Services (ADFS 2.0)

Benefits

• Organizations no longer need to move all user identities to a single Active Directory, allowing for an immediate adoption of ADFS.
• Signifcantly reduces the complexity of an ADFS deployment by not requiring multiple ADFS servers or Active Directory (AD) forest trusts.
• The Optimal STS can be trusted by and leveraged within an existing ADFS deployment.
• Provides additional out of the box authentication methods for ADFS such as: traditional forms-based authentication), Windows Integrated Authentication, Single Sign On to and from other identity management systems, and Department of Defense Common Access Card (CAC) authentication.

• VIS for Federation Services provides powerful Denial of Service (DoS) prevention capabilities for ADFS.
• Implementing Federation, exposes your Active Directory to a Denial of Service attack. VIS for Federation Services protects your Active Directory user accounts. As a cloud firewall, VIS prevents your Active Directory accounts from being locked out.
• You require audit records detailing "Who authenticated, When and with what Claims." VIS for Federation Services provides the complete and detailed auditing for ADFS.
• With customizable alerts or emails administrators can be notified in real-time of events such as: a Denial of Service attack, or n number of failed attempts on an account in a period of time.

• VIS Federation Services provides the ability to easily perform dynamic claim augmentation using a point and click graphical user interface (GUI); without any custom coding. Virtual Dynamic Claim Groups™, which consist of standard role claims, can now be assigned to users based on other incoming claim information. As information about a user changes, the role claims (i.e. security) are dynamically updated by the VIS Federation Services solution.
• Any claims-enabled applications that include support for ADFS 2.0, such as SharePoint 2010 and Forefront Unified Access Gateway (UAG), can leverage these powerful new capabilities.
• A single consistent security model can be used across internal, external and federated user communities.
• Security can be defined once for securing resources both on-premise and in the cloud, without any software being installed in the cloud.
• Significantly reduces the administration of an ADFS deployment.