Microsoft AD FS Integration

Active Directory Federation Services (AD FS) enables SSO, allowing users to access external applications using their on-premises Active Directory credentials

Read docs Visit GitHub

Microsoft AD FS

Benefits with Ory + Microsoft AD FS Integration

Integrating Microsoft AD FS SAML SSO with Ory enables seamless enterprise identity federation, allowing employees to authenticate using their existing Active Directory credentials. By combining Ory's flexible identity infrastructure with AD FS's standardized SAML capabilities, you can bridge the gap between your on-premises directory and modern cloud applications. This integration eliminates repetitive sign-ins, enhances user productivity, and ensures that corporate access control policies are consistently enforced

Use Cases

— 01 use case

B2B IAM

Overcomes the challenge of fragmented enterprise access by enabling seamless SAML federation, bridging the gap between on-premises Active Directory and modern cloud applications

Explore B2B IAM

Core Functionality

— 05 capabilities

Enterprise Identity Federation
Seamlessly connects external Identity Providers (IdPs) via SAML for unified access management.
Automated Attribute Mapping
Extracts and maps essential HR fields like emails, names, and group memberships automatically.
Secure Metadata Exchange
Simplifies setup through standardized XML metadata imports and configuration links.
Proactive Credential Management
Supports automated or scheduled certificate rollovers to ensure uninterrupted access.
Standardized Assertions
Securely consumes authenticated SAML 2.0 assertions to maintain consistent identity states

Frequently Asked Questions

How does the Microsoft AD FS enterprise SSO integration work with Ory?

Ory acts as the Service Provider (SP), consuming SAML or OIDC assertions from the external Identity Provider (IdP).

Can I enforce MFA with the Microsoft AD FS and Ory integration?

MFA is typically delegated to the upstream IdP, while Ory manages the resulting authenticated session.

Does the Microsoft AD FS integration with Ory support IdP-initiated SSO?

Ory primarily supports SP-initiated SSO flows for enhanced security and session context

More Microsoft Integrations

Go to integrations

More Enterprise SSO Integrations

Go to integrations

Microsoft AD FS Integration

Benefits with Ory + Microsoft AD FS Integration

Use Cases

B2B IAM

Core Functionality

Enterprise Identity Federation

Automated Attribute Mapping

Secure Metadata Exchange

Proactive Credential Management

Standardized Assertions

Frequently Asked Questions

More Microsoft Integrations

Microsoft Entra ID SCIM

Microsoft Azure

Microsoft Dynamics 365

Microsoft Entra ID (Azure AD)

More Enterprise SSO Integrations

Google Workspace Directory Sync

Google Workspace SAML

Microsoft Entra ID (Azure AD)

Okta SAML/OIDC SSO