The Wingtip Toys forest hosts a web application that users in the Tailspin Toys forest need to access.
Youare the system administrator at Tailspin Toys. A single federation server is present in each forest
and you are configuring a federated trust.
Which of the following statements are true about the deployment solution? (Choose all that apply.)
A.
The AD FS server in the Wingtip Toys forest will function as the claims-provider server.
B.
The AD FS server in the Wingtip Toys forest will function as the relying-party server.
C.
Youneed to configure a relying-party trust on the AD FS server in the Tailspin Toys forest.
D.
Youneed to configure a claims-provider trust on the AD FS server in the Tailspin Toys forest.
https://technet.microsoft.com/en-us/library/ee913566(d=printer,v=ws.11).aspx
B.
Relying party – The organization that receives and processes claims. See resource partner organization.
Resource federation server – The federation server in the resource partner organization.
C.
Relying party trust – In the AD FS Management snap-in, relying party trusts are trust objects typically created in:
Account partner organizations to represent the organization in the trust relationship whose accounts will be accessing resources in the resource partner organization.
1
0
Answer: A, B, C
Tailspin will need to configure a relying party trust to the Wingtip FS (in order to send claims/group/ect to Wingtip).
Wingtip FS will need to configure a Claims provider trust for Tailspin (in order to accept/transform claims from Tailspin).
Wingtip FS will also need to configure a relying Party Trust to the web application (in order to pass claims to the web app).
0
0
Below is a good link for configuring a setup such as that in the question. It will require 2 DCs (each on a separate domain), a FS in each domain, and a Webserver.
https://samilamppu.wordpress.com/2014/09/15/creating-federation-trust-between-organizations/
0
0