Mastering Active Directory - Second Edition

Hosted applications

Nowadays, hosted applications—such as software-as-a-service (SaaS) applications—are a common business operation model for lots of businesses. These applications are normally deployed in the perimeter or in a public network. These applications can also have authentication requirements, but it is not recommended to install AD DS in the perimeter or on a public network. In such a situation, the most common method is to deploy AD FS to provide federated access; however, additional resources and skills are still needed to deploy and maintain it. However, if complete isolation is required for the application, we can set up the AD LDS instance inside the perimeter/public network and provide the directory-enabled authentication ...