Active Directory Administration Cookbook

How it works...

Without RPTs, an AD FS farm doesn't provide functionality. By adding one or more RPTs, an AD FS admin could unlock single sign-on access to the application.

An RPT adds a relationship between an application and the AD FS farm. In this relationship, the application trusts the claim tokens issued by the AD FS farm. When an authenticated user presents the claim token to the application, the application uses the content of the claim token to perform authentication and authorization.

The option to Import data about the relying party published online or on a local network should be your preferred option to add RPTs, as it adds the ability to monitor and, optionally, update the information for the RPT automatically.

Optionally, claim ...