Mastering Active Directory

AD RMS with AD FS

As I explained in the previous topology, in order to be set up, it needs the AD RMS root cluster in each forest. Most of these forests also have two-way trust between them. But not every partner or business agrees to do so. They may want to use AD RMS but they may not want to maintain the AD RMS cluster or create trust between forests. AD FS allows companies to use the already deployed AD RMS cluster in a remote forest. AD FS allows user accounts to use their own credentials established by a federated trust relationship. When one organization trusts an AD RMS-trusted domain from a federated organization, first, it should import it using the trust federated users option as AD FS trusts are not transitive by default. Then, ...