Virtual Identity Server Federation Services

Extending the functionality of Active Directory Federation Services (ADFS 2.0)

Features

• VIS Federation Services can authenticate users wherever they reside, such as: other LDAP directories (Sun, ADAM, AD LDS, eDirectory, Open LDAP, etc.) as well as SQL databases.
• A single STS can authenticate users across multiple Active Directory forests without requiring multiple ADFS servers or any Active Directory forest trusts.
• The Optimal STS can be trusted by and leveraged within an existing ADFS deployment, or run stand-alone.
• Provides additional out of the box authentication methods for ADFS such as: traditional forms-based authentication), Windows Integrated Authentication, Single Sign On to and from other identity management systems, and Department of Defense Common Access Card (CAC) authentication.
• Out of the box support for two-factor authentication for ADFS. Extensibility allows you to integrate with any two factor solution.

• VIS for Federation Services provides powerful Denial of Service (DoS) prevention capabilities for ADFS.
• Implementing Federation, exposes your Active Directory to a Denial of Service attack. VIS for Federation Services protects your Active Directory user acccounts. As a cloud firewall, VIS prevents your Active Directory accounts from being locked out.
• VIS for Federation Services provides complete and detailed auditing for ADFS. Audit logs provide you the complete detail of "Who authenticated, When and with what Claims."
• With customizable alerts or emails administrators can be notified in real-time of events such as: a Denial of Service attack, or n number of failed attempts on an account in a period of time.

• VIS Federation Services provides the ability to easily perform dynamic claim augmentation using a point and click graphical user interface (GUI); without any custom coding. Virtual Dynamic Claim Groups™, which consist of standard role claims, can now be assigned to users based on other incoming claim information. As information about a user changes, the role claims (i.e. security) are dynamically updated by the VIS Federation Services solution.
• Any claims-enabled applications that include support for ADFS 2.0, such as SharePoint 2010 and Forefront Unified Access Gateway (UAG), can leverage these powerful new capabilities.
• A single consistent security model can be used across internal, external and federated user communities.
• Security can be defined once for securing resources both on-premise and in the cloud, without any software being installed in the cloud.